Dundas Dundas Bi
3 CVEs affecting Dundas Dundas Bi. Latest disclosed: 2020-11-10. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-18569 | High | 8.6 | 2019-02-11 | The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests (with certain re… |
CVE-2020-28409 | Medium | 5.4 | 2020-11-10 | The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. occur. |
CVE-2020-28408 | Medium | 5.4 | 2020-11-10 | The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard. |