Xcs

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2015-5453 MEDIUM POC THREAT This Month

Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 72.5%.

Command Injection Watchguard Xcs

NVD Exploit-DB

CVSS 2.0

6.5

EPSS

72.5%

Threat

5.0

CVE-2015-5452 HIGH POC THREAT Act Now

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 36.7%.

Watchguard SQLi Xcs

NVD Exploit-DB

CVSS 2.0

7.5

EPSS

36.7%

Threat

4.1

CVE-2015-5453

EPSS 72% 5.0 CVSS 6.5

MEDIUM POC THREAT This Month

Command Injection Watchguard Xcs

NVD Exploit-DB

CVE-2015-5452

EPSS 37% 4.1 CVSS 7.5

HIGH POC THREAT Act Now

Watchguard SQLi Xcs

NVD Exploit-DB