Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Vendor: SEH Computertechnik Clear all filters
TI-2024-10471 CVE-2024-11304 · GHSA-4gvm-v69v-r798

Multiple Stored Cross-Site Scripting

Priority MEDIUM 56

Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting (XSS).

CVSS 4.0MEDIUM 5.1 Network Low privileges User interaction EPSS 0.00531 Published 2024-11-18 No fix listed CWE-79
TI-2024-05038 CVE-2024-5422 · GHSA-78m4-c73f-766m

Denial of service in SEH Computertechnik utnserver Pro

Priority LOW 32

An uncontrolled resource consumption of file descriptors in SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 allows DoS via HTTP.This issue affects utnserver Pro, utnse…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00665 Published 2024-06-04 No fix listed CWE-400
TI-2024-05037 CVE-2024-5421 · GHSA-8pqj-vj9j-2jf2

Authenticated command injection in SEH Computertechnik utnserver Pro

Priority MEDIUM 46

Missing input validation and OS command integration of the input in the utnserver Pro, utnserver ProMAX, INU-100 web-interface allows authenticated command injection.This issue affects utnserver Pro, utnserver ProMAX, IN…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.03692 Published 2024-06-04 No fix listed CWE-78
TI-2024-05036 CVE-2024-5420 · GHSA-x9ph-fmr9-w768

Stored Cross-Site Scripting in SEH Computertechnik utnserver Pro

Priority MEDIUM 44

Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting (XSS)..This issue affects utnserver Pr…

CVSS 4.0HIGH 8.3 Network No auth User interaction EPSS 0.055 Published 2024-06-04 No fix listed CWE-79