Dundas

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-28409 Nov 10, 21:15 MEDIUM POC This Month

The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Dundas Bi Dundas

NVD

CVSS 3.1

5.4

EPSS

0.5%

CVE-2020-28408 Nov 10, 21:15 MEDIUM POC This Month

The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Dundas Bi Dundas

NVD

CVSS 3.1

5.4

EPSS

0.5%

CVE-2020-28409

EPSS 1% CVSS 5.4

MEDIUM POC This Month

The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Dundas Bi Dundas

NVD

CVE-2020-28408

EPSS 1% CVSS 5.4

MEDIUM POC This Month

The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

XSS Dundas Bi Dundas

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy