Ict

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2022-29734 Jun 02, 14:15 MEDIUM This Month

A cross-site scripting (XSS) vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

XSS Ict Protege Gx Protege Wx

NVD

CVSS 3.1

5.4

EPSS

0.4%

CVE-2022-29731 Jun 02, 14:15 MEDIUM This Month

An access control issue in ICT Protege GX/WX 2.08 allows attackers to leak SHA1 password hashes of other users. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Information Disclosure Ict Protege Gx Firmware Protege Wx Firmware

NVD

CVSS 3.1

4.3

EPSS

0.4%

CVE-2022-29734

EPSS 0% CVSS 5.4

MEDIUM This Month

XSS Ict Protege Gx +1

NVD

CVE-2022-29731

EPSS 0% CVSS 4.3

MEDIUM This Month

Information Disclosure Ict Protege Gx Firmware +1

NVD