Vulnerabilities

TI-2020-10490 CVE-2020-13378 · GHSA-j9xj-78x5-f5xc

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection…

HIGH 73

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to execute arbitrary code.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03306 Published 2023-05-12 No fix listed CWE-78

TI-2020-10489 CVE-2020-13377 · GHSA-8g8c-49hq-vg6g

The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could…

HIGH 68

The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged attacker to conduct directory traversal attacks and obtain read and write access to sens…

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.01526 Published 2023-05-12 No fix listed CWE-22

TI-2018-13365 CVE-2018-18864 · GHSA-757h-8w79-6prh

Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed.

MEDIUM 46

Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed.

CVSS 3.0CRITICAL 9.6 Network No auth User interaction EPSS 0.0257 Published 2018-11-20 No fix listed CWE-79

Vulnerabilities

Filters

Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection…

The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could…

Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed.