Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Vimbadmin Component: Vimbadmin Clear all filters
TI-2017-03987 CVE-2017-6086 · GHSA-rrmf-fpmm-jpwr

Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and…

Priority MEDIUM 42

Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an adminis…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.01998 Published 2017-06-27 No fix listed CWE-352
TI-2017-03805 CVE-2017-5870 · GHSA-jj4j-cwgq-fx7g

Multiple cross-site scripting (XSS) vulnerabilities in ViMbAdmin 3.0.15 allow remote…

Priority LOW 26

Multiple cross-site scripting (XSS) vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) transport parameter to domain/add; the (3) name parameter to…

CVSS 3.0MEDIUM 5.4 Network Low privileges User interaction EPSS 0.01012 Published 2017-05-23 No fix listed CWE-79