2 CVEs in 3 Heimavista products, including Dark Horse Rpage, Epage, Rpage. Newest: CVE-2024-2412 (2024-03-13). Severity, EPSS and public exploits for each.
The disabling function of the user registration page for Heimavista Rpage and Epage is not properly implemented, allowing remote attackers to complete user reg…
Heimavista Rpage has insufficient filtering for platform web URL. An unauthenticated remote attacker can inject JavaScript and perform XSS (Reflected Cross-Sit…