Squaredup - vulnerabilities (CVEs)
13 CVEs in 4 products, 0 in the last 30 days, newest from 2024-09-03.
Products
- Squaredup - 9 CVEs
- Dashboard Server - 3 CVEs
- Squaredup Ds For Scom - 1 CVEs
- Squalor - 0 CVEs
Newest CVEs of Squaredup
- CVE-2024-45180 - CVSS 5.4 (medium), 2024-09-03: SquaredUp DS for SCOM 6.2.1.11104 allows XSS.
- CVE-2022-46784 - CVSS 6.1 (medium), 2023-02-23: SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.1 GA.)
- CVE-2022-46785 - CVSS 6.1 (medium), 2023-02-23: SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).
- CVE-2022-46786 - CVSS 5.4 (medium), 2023-02-23: SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).
- CVE-2021-40096 - CVSS 5.4 (medium), 2021-12-07: A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web…
- CVE-2021-40092 - CVSS 5.4 (medium), 2021-12-07: A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via…
- CVE-2021-40095 - CVSS 4.9 (medium), 2021-12-07: An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion…
- CVE-2021-40094 - CVSS 5.4 (medium), 2021-12-07: A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious…
- CVE-2021-40093 - CVSS 5.4 (medium), 2021-12-07: A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web…
- CVE-2021-40091 - CVSS 9.8 (critical), 2021-12-06: An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.
- CVE-2020-9389 - CVSS 3.7 (low), 2021-02-03: A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious…
- CVE-2020-9388 - CVSS 6.5 (medium), 2021-02-03: CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administrator executing arbitrary code in a…
- CVE-2020-9390 - CVSS 5.4 (medium), 2021-02-03: SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that…
