Vulnerabilities

TI-2023-28463 CVE-2023-51948 · GHSA-99vg-whp9-cxq4

A Site-wide directory listing vulnerability in /fm in actidata actiNAS SL 2U-8 RDX…

MEDIUM 40

A Site-wide directory listing vulnerability in /fm in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to list the files hosted by the web application.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00714 Published 2024-01-19 No fix listed CWE-548

TI-2023-28462 CVE-2023-51947 · GHSA-2cq5-qqj9-pr9m

Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows…

HIGH 72

Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00751 Published 2024-01-19 No fix listed CWE-306

TI-2023-28461 CVE-2023-51946 · GHSA-hv3m-r794-pg43

Multiple reflected cross-site scripting (XSS) vulnerabilities in nasSvr.php in actidata…

MEDIUM 60

Multiple reflected cross-site scripting (XSS) vulnerabilities in nasSvr.php in actidata actiNAS-SL-2U-8 3.2.03-SP1 allow remote attackers to inject arbitrary web script or HTML.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00449 Published 2024-01-19 No fix listed CWE-79

Vulnerabilities

Filters

A Site-wide directory listing vulnerability in /fm in actidata actiNAS SL 2U-8 RDX…

Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows…

Multiple reflected cross-site scripting (XSS) vulnerabilities in nasSvr.php in actidata…