5 matches found
CVE-2021-40095
An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerability when processing remote input in the log files downloaded by an authenticated administrator user, leading to the ability to read...
4.9CVSS6AI score0.01014EPSS
SaveExploits0References3
CVE-2021-40094
A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device...
5.4CVSS5.8AI score0.00473EPSS
SaveExploits0References3
CVE-2021-40093
A cross-site scripting XSS vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via dashboard actions...
5.4CVSS5.8AI score0.00605EPSS
SaveExploits0References3
20