Vulnerabilities

TI-2020-13431 CVE-2020-18668 · GHSA-pg79-p2xm-4hpc

Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcalls.

LOW 26

Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcalls.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00758 Published 2021-06-24 No fix listed CWE-79

TI-2020-13430 CVE-2020-18667 · GHSA-wr6v-r7jg-6r8m

MEDIUM 45

SQL Injection vulnerability in WebPort <=1.19.1 via the new connection, parameter name in type-conn.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01357 Published 2021-06-24 No fix listed CWE-89

TI-2020-13429 CVE-2020-18665 · GHSA-9m96-26q9-qh73

LOW 27

Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01653 Published 2021-06-24 No fix listed CWE-22

TI-2020-13428 CVE-2020-18664 · GHSA-8xph-hh2v-cx4g

LOW 26

Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00728 Published 2021-06-24 No fix listed CWE-79

TI-2020-14635 CVE-2020-23659 · GHSA-jp49-74gj-pj2w

LOW 25

WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00557 Published 2020-08-26 No fix listed CWE-79

TI-2019-09303 CVE-2019-12461 · GHSA-6xp2-37x8-82p9

LOW 39

Web Port 1.19.1 allows XSS via the /log type parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.09872 Published 2019-05-30 No fix listed CWE-79

TI-2019-09302 CVE-2019-12460 · GHSA-vm76-33jx-q8x5

LOW 34

Web Port 1.19.1 allows XSS via the /access/setup type parameter.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.03833 Published 2019-05-30 No fix listed CWE-79