Vendor/product archive

dundas / dundas_bi CVEs

Beta · best-effort

3 CVEs tagged to dundas / dundas_bi — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dundas vendor archive

CVE-2020-28409

Published Nov 10, 2020

The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component (e.g., a button) when events such as click, hover, etc. occur.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-28408

Published Nov 10, 2020

The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-18569

Published Feb 11, 2019

The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests (with certain restrictions) that wil…

CVSS 8.6 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1