Falcon Xlweb Xlwebexe

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2014-3110 MEDIUM POC This Month

Multiple cross-site scripting (XSS) vulnerabilities on Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available and no vendor patch available.

XSS Honeywell Falcon Xlweb Linux Controller Falcon Xlweb Xlwebexe

NVD Exploit-DB

CVSS 2.0

4.3

EPSS

2.4%

CVE-2014-2717 HIGH This Week

Honeywell FALCON XLWeb Linux controller devices 2.04.01 and earlier and FALCON XLWeb XLWebExe controller devices 2.02.11 and earlier allow remote attackers to bypass authentication and obtain. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable. No vendor patch available.

Honeywell Authentication Bypass Falcon Xlweb Linux Controller Falcon Xlweb Xlwebexe

NVD

CVSS 2.0

7.6

EPSS

0.4%

CVE-2014-3110

EPSS 2% CVSS 4.3

MEDIUM POC This Month

XSS Honeywell Falcon Xlweb Linux Controller +1

NVD Exploit-DB

CVE-2014-2717

EPSS 0% CVSS 7.6

HIGH This Week

Honeywell Authentication Bypass Falcon Xlweb Linux Controller +1

NVD