Lucene search

Watchdog Console Security Vulnerabilities

cve

CVE-2018-10077

XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.

4.9CVSS

5.1AI Score

0.003EPSS

2018-04-20 09:29 PM

cve

CVE-2018-10078

Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description.

4.8CVSS

4.7AI Score

0.001EPSS

2018-04-20 09:29 PM

cve

CVE-2018-10079

Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating (1) config.xml or (2) servers.xml.

7.8CVSS

5.9AI Score

0.0004EPSS

2018-04-20 09:29 PM