Vulnerabilities

TI-2019-14530 CVE-2019-20152 · GHSA-p69h-f2p5-h43h

An XSS issue was discovered in TreasuryXpress 19191105.

LOW 28

An XSS issue was discovered in TreasuryXpress 19191105.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00668 Published 2020-08-20 No fix listed CWE-79

TI-2019-14529 CVE-2019-20151 · GHSA-5m84-gr67-qwm3

LOW 28

An XSS issue was discovered in TreasuryXpress 19191105.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00668 Published 2020-08-20 No fix listed CWE-79

TI-2019-14528 CVE-2019-20150 · GHSA-gxq8-qw7q-mh32

LOW 31

In TreasuryXpress 19191105, a logged-in user can discover saved credentials, even though the UI hides them.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00914 Published 2020-08-20 No fix listed