Nedi

CVEs (26)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-15031	Nedi Nedi	Med	0.35	5.4	0.01	Jul 7, 2020	NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Assets-Management.php chg parameter.
CVE-2020-15030	Nedi Nedi	Med	0.35	5.4	0.01	Jul 7, 2020	NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Routes.php rtr parameter.
CVE-2020-15029	Nedi Nedi	Med	0.35	5.4	0.01	Jul 7, 2020	NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Assets-Management.php sn parameter.
CVE-2020-15028	Nedi Nedi	Med	0.35	5.4	0.01	Jul 7, 2020	NeDi 1.9C is vulnerable to a cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Map.php xo parameter.
CVE-2020-15037	Nedi Nedi	Med	0.35	5.4	0.01	Jul 7, 2020	NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st[] parameter.
CVE-2020-15036	Nedi Nedi	Med	0.35	5.4	0.01	Jul 7, 2020	NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Linked.php dv parameter.

CVE-2020-15031MedJul 7, 2020
Nedi
Nedi
risk 0.35cvss 5.4epss 0.01
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Assets-Management.php chg parameter.
CVE-2020-15030MedJul 7, 2020
Nedi
Nedi
risk 0.35cvss 5.4epss 0.01
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Routes.php rtr parameter.
CVE-2020-15029MedJul 7, 2020
Nedi
Nedi
risk 0.35cvss 5.4epss 0.01
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Assets-Management.php sn parameter.
CVE-2020-15028MedJul 7, 2020
Nedi
Nedi
risk 0.35cvss 5.4epss 0.01
NeDi 1.9C is vulnerable to a cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Map.php xo parameter.
CVE-2020-15037MedJul 7, 2020
Nedi
Nedi
risk 0.35cvss 5.4epss 0.01
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Reports-Devices.php page st[] parameter.
CVE-2020-15036MedJul 7, 2020
Nedi
Nedi
risk 0.35cvss 5.4epss 0.01
NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the Topology-Linked.php dv parameter.

Page 2 of 2