Flexense: >> Dupscout >> 10.0.18 Security Vulnerabilities
A buffer overflow in the web server of Flexense DupScout Enterprise 10.0.18 allows a remote anonymous attacker to execute code as SYSTEM by overflowing the sid parameter via a GET /settings&sid= attack.
CVSS Score
9.8
EPSS Score
0.034
Published
2020-12-09
XSS exists in Flexense DupScout Enterprise from v10.0.18 to v10.7.
CVSS Score
6.1
EPSS Score
0.002
Published
2018-05-02