3 matches found
CVE-2024-42020
A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection.
CVE-2024-42022
An incorrect permission assignment vulnerability allows an attacker to modify product configuration files.
CVE-2024-42021
An improper access control vulnerability allows an attacker with valid access tokens to access saved credentials.