Webpam Proe

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-6603 MEDIUM This Month

Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Injection attacks via JavaScript code in a PHPSESSID cookie. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Webpam Proe

NVD

CVSS 3.0

6.1

EPSS

0.8%

CVE-2018-6603

EPSS 1% CVSS 6.1

MEDIUM This Month

Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Injection attacks via JavaScript code in a PHPSESSID cookie. Rated medium severity (CVSS 6.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

XSS Webpam Proe

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy