Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: ETIC Telecom Remote Access Server (RAS) 4.5.0 Clear all filters
TI-2024-17244 CVE-2024-26154 · GHSA-q4j6-2ccx-7qvg

ETIC Telecom Remote Access Server (RAS) Cross-site Scripting

Priority LOW 22

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting in the appliance site name.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00231 Published 2025-01-17 Fixed in 4.5.0 CWE-79
TI-2024-17247 CVE-2024-26157 · GHSA-6m77-33f8-v28x

ETIC Telecom Remote Access Server (RAS) Cross-site Scripting

Priority LOW 24

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting (XSS) attacks in get view method under view parameter.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00239 Published 2025-01-17 Fixed in 4.5.0 CWE-79
TI-2024-17246 CVE-2024-26156 · GHSA-gvf6-6v9q-fc35

ETIC Telecom Remote Access Server (RAS) Cross-site Scripting

Priority LOW 22

All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0 are vulnerable to reflected cross site scripting (XSS) attacks in the method parameter.

CVSS 4.0MEDIUM 4.8 Network High privileges User interaction EPSS 0.00231 Published 2025-01-17 Fixed in 4.5.0 CWE-79