Lucene search
+L

31 matches found

Cvelist
Cvelist
•added 2021/08/12 5:21 p.m.•39 views

CVE-2021-36921

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall AIWAF devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request...

9.2AI score0.01366EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/12 12:00 a.m.•5 views

CVE-2021-36921: Improper Authentication

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall AIWAF devices with Manager 2.1.0 has Improper Authentication. An attacker can gain administrative access by modifying the response to an authentication check request...

8.8CVSS5.8AI score0.01366EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/08/12 12:00 a.m.•3 views

CVE-2021-36982: Improper Input Validation

AIMANAGER before B115 on MONITORAPP Application Insight Web Application Firewall AIWAF devices with Manager 2.1.0 allows OS Command Injection because of missing input validation on one of the parameters of an HTTP request...

9.3CVSS5.9AI score0.02466EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/08/12 12:00 a.m.•12 views

MONITORAPP Application Insight Web Application Firewall 输入验证错误漏洞

MONITORAPP Application Insight Web Application Firewall AIWAF is an application firewall from MONITORAPP Corporation in South Korea. The MONITORAPP Application Insight Web Application Firewall suffers from an input validation error vulnerability that stems from a lack of input validation for one ...

9.3CVSS7.7AI score0.02466EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2021/08/12 12:00 a.m.•14 views

MONITORAPP Application Insight Web Application Firewall 授权问题漏洞

The MONITORAPP Application Insight Web Application Firewall AIWAF is an application firewall from MONITORAPP Corporation in South Korea. A security vulnerability exists in Manager 2.1.0 before B115 on the MONITORAPP Application Insight Web Application Firewall AIWAF appliance, which stems from...

8.8CVSS8AI score0.01366EPSS
SaveExploits0References4
NVD
NVD
•added 2020/06/16 10:15 p.m.•36 views

CVE-2020-14210

Reflected Cross-Site Scripting XSS vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking...

6.1CVSS0.00996EPSS
SaveExploits0References2
OSV
OSV
•added 2020/06/16 10:15 p.m.•19 views

CVE-2020-14210

Reflected Cross-Site Scripting XSS vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking...

6.1CVSS6.3AI score0.00996EPSS
SaveExploits0References2
Prion
Prion
•added 2020/06/16 10:15 p.m.•26 views

Cross site scripting

Reflected Cross-Site Scripting XSS vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking...

4.3CVSS6AI score0.00996EPSS
SaveExploits0References2Affected Software2
CVE
CVE
•added 2020/06/16 9:10 p.m.•74 views

CVE-2020-14210

Concrete details found: MONITORAPP WAF (AIWAF‑VE/AIWAF‑4000) has a reflected XSS vulnerability due to insufficient validation of client data by the web application. Impact is client‑side code execution. No patch/version remediation is specified in the provided documents; exploitation status is no...

6.1CVSS6AI score0.00996EPSS
SaveExploits0References2Affected Software2
Cvelist
Cvelist
•added 2020/06/16 9:10 p.m.•45 views

CVE-2020-14210

Reflected Cross-Site Scripting XSS vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking...

6AI score0.00996EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/06/16 12:00 a.m.•5 views

CVE-2020-14210: Improper Neutralization of Input During Web Page Generation

Reflected Cross-Site Scripting XSS vulnerability in MONITORAPP WAF in which script can be executed when responding to Request URL information. It provides a function to response to Request URL information when blocking...

6.1CVSS5.8AI score0.00996EPSS
SaveExploits0References2
Rows per page
Query Builder