Sunbirddcim Dctrack
4 CVEs affecting Sunbirddcim Dctrack. Latest disclosed: 2024-12-16. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-37774 | High | 8.0 | 2024-12-16 | A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user… |
CVE-2024-37775 | High | 7.5 | 2024-12-16 | Incorrect access control in Sunbird DCIM dcTrack v9.1.2 allows attackers to create or update a ticket with a location which bypasses an RBAC check. |
CVE-2024-37776 | Medium | 4.8 | 2024-12-16 | A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in so… |
CVE-2024-37773 | Medium | 4.8 | 2024-12-16 | An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen. |