Skip to main content

Vendor/product archive

promise / webpam_proe CVEs

Beta · best-effort

1 CVEs tagged to promise / webpam_proe0 Critical, 0 High, 1 Medium, 0 Low, 0 Unrated.

CVE-2018-6603

Published Feb 7, 2018

Promise Technology WebPam Pro-E devices allow remote attackers to conduct XSS, HTTP Response Splitting, and CRLF Injection attacks via JavaScript code in a PHPSESSID cookie.

CVSS 6.1 · Medium
Vendor/product tagsBeta · best-effort
Showing 1-1 of 1 CVEsPage 1 of 1