Vulnerabilities

TI-2024-30277 CVE-2024-45180 · GHSA-vp6m-7x2g-h3wf

SquaredUp DS for SCOM 6.2.1.11104 allows XSS.

LOW 24

SquaredUp DS for SCOM 6.2.1.11104 allows XSS.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00245 Published 2024-09-03 No fix listed CWE-79

TI-2022-23137 CVE-2022-46786 · GHSA-58fq-xw5f-6c3m

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).

LOW 25

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00393 Published 2023-02-23 No fix listed CWE-79

TI-2022-23136 CVE-2022-46785 · GHSA-hqgw-j4g9-hm5x

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).

LOW 27

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00402 Published 2023-02-23 No fix listed CWE-79

TI-2022-23135 CVE-2022-46784 · GHSA-67hr-7hg5-hq6p

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection.

LOW 27

SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00373 Published 2023-02-23 No fix listed CWE-601

TI-2021-17292 CVE-2021-40096 · GHSA-8w4w-47r7-gx5v

A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for…

LOW 26

A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some int…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00798 Published 2021-12-07 No fix listed CWE-79

TI-2021-17291 CVE-2021-40095 · GHSA-2v2m-jqm3-cq3x

An issue was discovered in SquaredUp for SCOM 5.2.1.6654.

LOW 24

An issue was discovered in SquaredUp for SCOM 5.2.1.6654.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.01014 Published 2021-12-07 No fix listed

TI-2021-17290 CVE-2021-40094 · GHSA-qv89-64x4-4p5x

A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654.

LOW 25

A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00473 Published 2021-12-07 No fix listed CWE-79

TI-2021-17289 CVE-2021-40093 · GHSA-xp4c-cgxh-h77w

A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for…

LOW 25

A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via dashboard actions.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00605 Published 2021-12-07 No fix listed CWE-79

TI-2021-17288 CVE-2021-40092 · GHSA-v8wc-9v93-v894

A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654…

LOW 25

A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00605 Published 2021-12-07 No fix listed CWE-79

TI-2021-17287 CVE-2021-40091 · GHSA-7p58-rq3f-p4j3

An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.

MEDIUM 44

An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0109 Published 2021-12-06 No fix listed CWE-918

TI-2020-07509 CVE-2020-9389 · GHSA-f8pq-r7mv-pvxm

A username enumeration issue was discovered in SquaredUp before version 4.6.0.

LOW 19

A username enumeration issue was discovered in SquaredUp before version 4.6.0.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00942 Published 2021-02-03 No fix listed CWE-203

TI-2020-07510 CVE-2020-9390 · GHSA-rwp8-hjvg-qf49

SquaredUp allowed Stored XSS before version 4.6.0.

LOW 26

SquaredUp allowed Stored XSS before version 4.6.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00884 Published 2021-02-03 No fix listed CWE-79

TI-2020-07508 CVE-2020-9388 · GHSA-2f25-c9pg-f9fc

CSRF protection was not present in SquaredUp before version 4.6.0.

LOW 30

CSRF protection was not present in SquaredUp before version 4.6.0.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00786 Published 2021-02-03 No fix listed CWE-352

Vulnerabilities

Filters