VYPR

Desknet Neo

by NEOJAPAN Inc.

CVEs (2)

  • CVE-2020-5638MedDec 3, 2020
    risk 0.40cvss 6.1epss 0.01

    Cross-site scripting vulnerability in desknet's NEO (desknet's NEO Small License V5.5 R1.5 and earlier, and desknet's NEO Enterprise License V5.5 R1.5 and earlier) allows remote attackers to inject arbitrary script via unspecified vectors.

  • CVE-2015-2990Sep 5, 2015
    risk 0.00cvss —epss 0.02

    Directory traversal vulnerability in zhtml.cgi in NEOJAPAN desknet NEO 2.0R1.0 through 2.5R1.4 allows remote authenticated users to read arbitrary files via a crafted parameter.