Vulnerabilities (CVE)

Filtered by vendor Vermeg Subscribe
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-34832 1 Vermeg 1 Agile Reporter 2023-12-10 N/A 6.5 MEDIUM
An issue was discovered in VERMEG AgileReporter 21.3. XXE can occur via an XML document to the Analysis component.
CVE-2022-34833 1 Vermeg 1 Agile Reporter 2023-12-10 N/A 5.4 MEDIUM
An issue was discovered in VERMEG AgileReporter 21.3. An admin can enter an XSS payload in the Analysis component.
CVE-2022-34834 1 Vermeg 1 Agile Reporter 2023-12-10 N/A 4.8 MEDIUM
An issue was discovered in VERMEG AgileReporter 21.3. Attackers can gain privileges via an XSS payload in an Add Comment action to the Activity log.