Zenitel Ip-Stationweb
2 CVEs affecting Zenitel Ip-Stationweb. Latest disclosed: 2018-12-06. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-19926 | Medium | 6.1 | 2018-12-06 | Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATH_INFO. |
CVE-2018-19927 | Medium | 4.8 | 2018-12-06 | Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station Status or Account Settings, related to the goform/zForm_save_cha… |