Actidata: Security Vulnerabilities
Multiple reflected cross-site scripting (XSS) vulnerabilities in nasSvr.php in actidata actiNAS-SL-2U-8 3.2.03-SP1 allow remote attackers to inject arbitrary web script or HTML.
CVSS Score
6.1
EPSS Score
0.001
Published
2024-01-19
Improper access control on nasSvr.php in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to read and modify different types of data without authentication.
CVSS Score
9.1
EPSS Score
0.003
Published
2024-01-19
A Site-wide directory listing vulnerability in /fm in actidata actiNAS SL 2U-8 RDX 3.2.03-SP1 allows remote attackers to list the files hosted by the web application.
CVSS Score
7.5
EPSS Score
0.002
Published
2024-01-19