Spaceapplications: >> Yacms Security Vulnerabilities
Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser.
CVSS Score
5.4
EPSS Score
0.002
Published
2023-11-20
Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer.
CVSS Score
5.4
EPSS Score
0.005
Published
2023-11-20
An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking.
CVSS Score
6.1
EPSS Score
0.001
Published
2023-11-20