Vendor/product archive

steelcase / roomwizard CVEs

Beta · best-effort

3 CVEs tagged to steelcase / roomwizard — 0 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

CVE-2018-7057

Published Feb 15, 2018

RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter.

CVSS 6.1 · Medium

Vendor/product tagsBeta · best-effort

Published Feb 15, 2018

RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action.

CVSS 5.3 · Medium

Vendor/product tagsBeta · best-effort

Published Feb 15, 2018

GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter.

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1