Vulnerabilities

TI-2012-04497 CVE-2012-5323 · GHSA-583r-395v-x5rg

Cross-site request forgery (CSRF) vulnerability in…

LOW 32

Cross-site request forgery (CSRF) vulnerability in webconfig/admin_passwd/passwd.html/admin_passwd in Xavi X7968 allows remote attackers to hijack the authentication of administrators for requests that change the adminis…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01038 Published 2012-10-08 No fix listed CWE-352

TI-2012-04496 CVE-2012-5322 · GHSA-vrg2-5ghr-57mf

Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers to inject arbitrary web script or HTML via the (1) pvcName parameter to webconfig/wan/confirm.html/confirm or (2) host_name_txtbox…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01663 Published 2012-10-08 No fix listed CWE-79

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability in…

Multiple cross-site scripting (XSS) vulnerabilities in Xavi X7968 allow remote attackers…