Vermeg Agile Reporter
3 CVEs affecting Vermeg Agile Reporter. Latest disclosed: 2023-10-27. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-34832 | Medium | 6.5 | 2023-10-27 | An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component. |
CVE-2022-34833 | Medium | 5.4 | 2023-10-27 | An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component. |
CVE-2022-34834 | Medium | 4.8 | 2023-10-27 | An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activity log. |