Modern Client Management Security Vulnerabilities

CVE-2021-27780

The software may be vulnerable to both Un-Auth XML interaction and unauthenticated device enrollment.

CVE-2021-27781

The Master operator may be able to embed script tag in HTML with alert pop-up display cookie.