Ibi

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2020-10951 MEDIUM This Month

Western Digital My Cloud Home and ibi devices before 2.2.0 allow clickjacking on sign-in pages. Rated medium severity (CVSS 4.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Ibi My Cloud Home

NVD

CVSS 3.1

4.7

EPSS

0.9%

CVE-2020-8990 CRITICAL PATCH Act Now

Western Digital My Cloud Home before 3.6.0 and ibi before 3.6.0 allow Session Fixation. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity.

Session Fixation Information Disclosure Ibi My Cloud Home

NVD

CVSS 3.1

9.1

EPSS

1.0%

CVE-2020-10951

EPSS 1% CVSS 4.7

MEDIUM This Month

XSS Ibi My Cloud Home

NVD

CVE-2020-8990

EPSS 1% CVSS 9.1

CRITICAL PATCH Act Now

Session Fixation Information Disclosure Ibi +1

NVD