CVE-2019-9509
Published Mar 30, 2020The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to reflected XSS in an HTTP POST parameter. The web application does not neutralize user-controllab…
Vendor archive
vertiv CVEs
Beta · best-effort8 CVEs tagged to vendor vertiv — 0 Critical, 4 High, 4 Medium, 0 Low, 0 Unrated.
CVE-2019-9508
Published Mar 30, 2020The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to stored XSS. A remote attacker authenticated with an administrator account could store a maliciou…
CVE-2019-9507
Published Mar 30, 2020The web interface of the Vertiv Avocent UMG-4000 version 4.2.1.19 is vulnerable to command injection because the application incorrectly neutralizes code syntax before executing.…
CVE-2018-12922
Published Jun 28, 2018Emerson Liebert IntelliSlot Web Card devices allow remote attackers to reconfigure access control via the config/configUser.htm or config/configTelnet.htm URI.
CVE-2018-10079
Published Apr 20, 2018Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating (1) config.xml or…
CVE-2018-10078
Published Apr 20, 2018Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description.
CVE-2018-10077
Published Apr 20, 2018XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.
CVE-2015-7260
Published Apr 10, 2017Liebert MultiLink Automated Shutdown v4.2.4 allows local users to gain privileges by replacing the LiebertM executable file.
Showing 1-8 of 8 CVEsPage 1 of 1