Vulnerabilities

TI-2023-25599 CVE-2023-47311 · GHSA-75g5-m988-7348

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking.

LOW 28

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00419 Published 2023-11-20 No fix listed CWE-1021

TI-2023-25022 CVE-2023-46471 · GHSA-7xqf-whj5-xm7f

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a…

MEDIUM 58

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00603 Published 2023-11-20 No fix listed CWE-79

TI-2023-25021 CVE-2023-46470 · GHSA-5m96-93vv-3v3x

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a…

LOW 25

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00603 Published 2023-11-20 No fix listed CWE-79

Vulnerabilities

Filters

An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking.

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a…

Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a…