Leostream Connection Broker
5 CVEs affecting Leostream Connection Broker. Latest disclosed: 2022-01-18. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-26574 | Critical | 9.6 | 2020-10-06 | Leostream Connection Broker 8.2.x is affected by stored XSS. An unauthenticated attacker can inject arbitrary JavaScript code via the webquery.pl User-Agent HT… |
CVE-2018-18817 | High | 7.5 | 2018-10-30 | The Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or earlier allows remote attackers to modify registry keys via the L… |
CVE-2021-41550 | High | 7.2 | 2022-01-18 | Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code. |
CVE-2021-38157 | Medium | 6.1 | 2021-08-06 | LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter. NOTE: This vulnerability only affects pr… |
CVE-2021-41551 | Medium | 4.9 | 2022-01-18 | Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a symbolic link. |