Vulnerabilities

TI-2015-05438 CVE-2015-6475 · GHSA-4wxm-97vh-7m26

Multiple cross-site scripting (XSS) vulnerabilities in IBC Solar ServeMaster TLP+ and…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01141 Published 2015-09-25 No fix listed CWE-79

TI-2015-05437 CVE-2015-6474 · GHSA-4pcx-rr5j-rxx3

IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to discover…

LOW 26

IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allow remote attackers to discover cleartext passwords by reading HTML source code.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01359 Published 2015-09-25 No fix listed CWE-200

TI-2015-05432 CVE-2015-6469 · GHSA-3g92-r6cp-xjxj

The interpreter in IBC Solar ServeMaster TLP+ and Danfoss TLX Pro+ allows remote…