Steelcase Roomwizard Firmware
3 CVEs affecting Steelcase Roomwizard Firmware. Latest disclosed: 2018-02-15. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-7055 | High | 7.5 | 2018-02-15 | GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter. |
CVE-2018-7057 | Medium | 6.1 | 2018-02-15 | RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter. |
CVE-2018-7056 | Medium | 5.3 | 2018-02-15 | RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action. |