Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Priority LOW 31

A vulnerability in the web-based management interface of RAD SecFlow-1v through 2020-05-21 could allow an authenticated attacker to upload a JavaScript file, with a stored XSS payload, that will remain stored in the syst…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01982 Published 2020-09-17 No fix listed CWE-434
Priority MEDIUM 46

A vulnerability in the web-based management interface of RAD SecFlow-1v os-image SF_0290_2.3.01.26 could allow an unauthenticated, remote attacker to conduct a cross-site request forgery (CSRF) attack on an affected syst…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.04663 Published 2020-09-16 No fix listed CWE-352