Veeam One Reporter
3 CVEs affecting Veeam One Reporter. Latest disclosed: 2019-07-27. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-11569 | High | 8.8 | 2019-05-06 | Veeam ONE Reporter 9.5.0.3201 allows CSRF. |
CVE-2019-14298 | Medium | 5.4 | 2019-07-27 | Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Description(config) field to addDashboard or editDashboard in CommonDataHandlerReadOnly.ashx. |
CVE-2019-14297 | Medium | 5.4 | 2019-07-27 | Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerReadOnly.ashx. |