Squaredup

13 CVEs across 3 Squaredup products. Browse Squaredup vulnerabilities, severities, and proof-of-concept exploits.

Squaredup products with known CVEs

ProductCVEs
Squaredup9
Dashboard Server3
Squaredup Ds For Scom1
Squaredup CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-45180Medium5.42024-09-03SquaredUp DS for SCOM 6.2.1.11104 allows XSS.
CVE-2022-46785Medium6.12023-02-23SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).
CVE-2022-46784Medium6.12023-02-23SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.1 GA.)
CVE-2022-46786Medium5.42023-02-23SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).
CVE-2021-40096Medium5.42021-12-07A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script…
CVE-2021-40095Medium4.92021-12-07An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerabil…
CVE-2021-40094Medium5.42021-12-07A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code…
CVE-2021-40093Medium5.42021-12-07A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script…
CVE-2021-40092Medium5.42021-12-07A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an…
CVE-2021-40091Critical9.82021-12-06An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.
CVE-2020-9390Medium5.42021-02-03SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that…
CVE-2020-9389Low3.72021-02-03A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious u…
CVE-2020-9388Medium6.52021-02-03CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administrator executing arbitrary code in a HTM…