Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: IPCOMM Clear all filters
TI-2022-08305 CVE-2022-24432 · GHSA-jgvg-vxx8-m383

ICSA-22-062-01 IPCOMM ipDIO

Priority LOW 26

Persistent cross-site scripting (XSS) in the web interface of ipDIO allows an authenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into specific fields.

CVSS 3.1MEDIUM 5.5 Network Low privileges User interaction EPSS 0.00654 Published 2022-03-09 No fix listed CWE-79
TI-2022-08722 CVE-2022-24915 · GHSA-vp3m-wwp8-x3hf

ICSA-22-062-01 IPCOMM ipDIO

Priority MEDIUM 42

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the web section where t…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01013 Published 2022-03-09 No fix listed CWE-94
TI-2022-07160 CVE-2022-22985 · GHSA-8v3j-rhwm-r3pc

ICSA-22-062-01 IPCOMM ipDIO

Priority MEDIUM 42

The absence of filters when loading some sections in the web application of the vulnerable device allows attackers to inject malicious code that will be interpreted when a legitimate user accesses the specific web sectio…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01042 Published 2022-03-09 No fix listed CWE-94
TI-2022-05549 CVE-2022-21146 · GHSA-cvqf-ghfm-xpr4

ICSA-22-062-01 IPCOMM ipDIO

Priority LOW 30

Persistent cross-site scripting in the web interface of ipDIO allows an unauthenticated remote attacker to introduce arbitrary JavaScript by injecting an XSS payload into a specific parameter.

CVSS 3.1MEDIUM 6.3 Network No auth User interaction EPSS 0.00907 Published 2022-03-09 No fix listed CWE-79