Astpp
2 CVEs
product
Monthly
Multiple vulnerabilities in ASTPP 4.0.1 including XSS and command injection in SIP device configuration and plugin management. PoC available.
Aws
XSS
Command Injection
Astpp
NVD
GitHub
Exploit-DB
CVSS 3.1
9.8
EPSS
0.2%
Astpp versions up to 4.0.1 is affected by insertion of sensitive information into externally-accessible file (CVSS 7.5).
Information Disclosure
Astpp
NVD
GitHub
Exploit-DB
CVSS 3.1
7.5
EPSS
0.1%
CVE-2020-37153
EPSS 0%
CVSS 9.8
CRITICAL
POC
Act Now
Multiple vulnerabilities in ASTPP 4.0.1 including XSS and command injection in SIP device configuration and plugin management. PoC available.
Aws
XSS
Command Injection
+1
NVD
GitHub
Exploit-DB
CVE-2020-37104
EPSS 0%
CVSS 7.5
HIGH
POC
This Week
Astpp versions up to 4.0.1 is affected by insertion of sensitive information into externally-accessible file (CVSS 7.5).
Information Disclosure
Astpp
NVD
GitHub
Exploit-DB