Vulnerabilities

TI-2021-15057 CVE-2021-36982 · GHSA-3rv5-ggwr-m2p2

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF)…

MEDIUM 40

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP requ…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02466 Published 2021-08-12 No fix listed CWE-20

TI-2021-15001 CVE-2021-36921 · GHSA-fj8v-w5xg-jhc7

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF)…

MEDIUM 41

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF) devices with Manager 2.1.0 has Improper Authentication.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01366 Published 2021-08-12 No fix listed CWE-287

TI-2020-11131 CVE-2020-14210 · GHSA-g985-jjm8-vhcp

Reflected Cross-Site Scripting (XSS) vulnerability in MONITORAPP WAF in which script can…

LOW 29

Reflected Cross-Site Scripting (XSS) vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00996 Published 2020-06-16 No fix listed CWE-79

Vulnerabilities

Filters

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF)…

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall (AIWAF)…

Reflected Cross-Site Scripting (XSS) vulnerability in MONITORAPP WAF in which script can…