Vulnerabilities

TI-2020-17432 CVE-2020-28898 · GHSA-8f3f-v672-6q39

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in…

LOW 27

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in specific URL parameters causes a server error in script execution due to insufficient input validation.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01343 Published 2021-04-15 No fix listed CWE-20

TI-2020-15755 CVE-2020-25746 · GHSA-m6gc-ch5r-72pr

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with…

LOW 21

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with physical access to the device) to obtain sensitive information via the debug interface (keystrokes over a USB cable), aka wireless passwor…

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00307 Published 2020-11-17 No fix listed CWE-200

TI-2020-10858 CVE-2020-13877 · GHSA-5m2f-38x2-jc6h

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could…

MEDIUM 46

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could lead to remote code execution and information disclosure.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02224 Published 2020-11-12 No fix listed CWE-89

Vulnerabilities

Filters

In QED ResourceXpress through 4.9k, a large numeric or alphanumeric value submitted in…

QED ResourceXpress Qubi3 devices before 1.40.9 could allow a local attacker (with…

SQL Injection issues in various ASPX pages of ResourceXpress Meeting Monitor 4.9 could…