Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Lenovo Enterprise Network Disk 6.1 patch 6 hotfix 4 Clear all filters
TI-2020-06746 CVE-2020-8348 · GHSA-4pqr-cgc7-84h8

Cross-site scripting in Lenovo Enterprise Network Disk

Priority LOW 29

A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's current browser sess…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00994 Published 2020-09-24 Fixed in 6.1 patch 6 hotfix 4 CWE-79
TI-2020-06745 CVE-2020-8347 · GHSA-9qpq-wq75-qh2w

Cross-site scripting in Lenovo Enterprise Network Disk

Priority LOW 29

A reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's browser if a crafte…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01064 Published 2020-09-24 Fixed in 6.1 patch 6 hotfix 4 CWE-79