Roomwizard CVEs and Security Vulnerabilities - OpenCVE

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2018-7057

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Steelcase

Products

Roomwizard Roomwizard Firmware

CVE-2018-7056

RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action.

CVSS 3.0 · 5.3 Medium EPSS 1.1% KEV · Not listed

Vendors

Steelcase

Products

Roomwizard Roomwizard Firmware

CVE-2018-7055

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter.

CVSS 3.0 · 7.5 High EPSS 1.1% KEV · Not listed

Vendors

Steelcase

Products

Roomwizard Roomwizard Firmware

Page 1 of 1.