Security Vulnerabilities - CVEs Published In August 2019
Zurmo 3.2.7-2 has XSS via the app/index.php/zurmo/default PATH_INFO.
CVSS Score
6.1
EPSS Score
0.002
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-369).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-01
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry (SEC-370).
CVSS Score
5.4
EPSS Score
0.003
Published
2019-08-01
cPanel before 70.0.23 allows any user to disable Solr (SEC-371).
CVSS Score
5.5
EPSS Score
0.001
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster (SEC-372).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM Create Account action (SEC-373).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action (SEC-374).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM "Delete a DNS Zone" action (SEC-375).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM DNS Cleanup action (SEC-376).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01
cPanel before 70.0.23 allows stored XSS via a WHM Synchronize DNS Records action (SEC-377).
CVSS Score
6.1
EPSS Score
0.004
Published
2019-08-01