Search vulnerabilities

Results 1

Export CSV
CVE-2018-6603

Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Injection attacks via JavaScript code in a PHPSESSID cookie.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Products