3 matches found
CVE-2024-26156
All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0are vulnerable to reflected cross site scripting (XSS) attacks in themethod parameter. The ETIC RAS web server uses dynamic pages that getstheir input from the client side and reflects the input in its responseto the client.
CVE-2024-26157
All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0are vulnerable to reflected cross site scripting (XSS) attacks in getview method under view parameter. The ETIC RAS web server uses dynamicpages that get their input from the client side and reflect the input intheir response to ...
CVE-2024-26154
All versions of ETIC Telecom Remote Access Server (RAS) prior to 4.5.0are vulnerable to reflected cross site scripting in the appliance sitename. The ETIC RAS web server saves the site name and then presents itto the administrators in a few different pages.