Vulnerabilities

TI-2020-19363 CVE-2020-37228 · GHSA-3rx5-cvg5-f68h

iDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypass

HIGH 81

iDS6 DSSPro Digital Signage System 6.2 contains a CAPTCHA security bypass vulnerability that allows attackers to bypass authentication by requesting the autoLoginVerifyCode object.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00429 Published 2026-05-16 No fix listed CWE-307

TI-2020-19055 CVE-2020-36920 · GHSA-r855-vcgq-f3fh

iDS6 DSSPro Digital Signage System 6.2 Privilege Escalation via Access Control

HIGH 73

iDS6 DSSPro Digital Signage System 6.2 contains an improper access control vulnerability that allows authenticated users to elevate privileges through console JavaScript functions.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00367 Published 2026-01-06 No fix listed CWE-863

TI-2020-19053 CVE-2020-36918 · GHSA-w554-xjrp-3h3g

iDS6 DSSPro Digital Signage System 6.2 Cross-Site Request Forgery via User Management

MEDIUM 56

iDS6 DSSPro Digital Signage System 6.2 contains a cross-site request forgery vulnerability that allows attackers to perform administrative actions without request validation.

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00165 Published 2026-01-06 No fix listed CWE-352

Vulnerabilities

Filters

iDS6 DSSPro Digital Signage System 6.2 CAPTCHA Security Bypass

iDS6 DSSPro Digital Signage System 6.2 Privilege Escalation via Access Control

iDS6 DSSPro Digital Signage System 6.2 Cross-Site Request Forgery via User Management