Oneshield Policy

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-11643 MEDIUM This Month

Persistent XSS has been found in the OneShield Policy (Dragon Core) framework before 5.1.10. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Oneshield Policy

NVD

CVSS 3.0

6.1

EPSS

0.9%

CVE-2019-11642 HIGH This Week

A log poisoning vulnerability has been discovered in the OneShield Policy (Dragon Core) framework before 5.1.10. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Code Injection Java RCE Oneshield Policy

NVD

CVSS 3.0

8.8

EPSS

1.5%

CVE-2019-11643

EPSS 1% CVSS 6.1

MEDIUM This Month

XSS Oneshield Policy

NVD

CVE-2019-11642

EPSS 2% CVSS 8.8

HIGH This Week

Code Injection Java RCE +1

NVD