i-pro records
4 published records for vendor i-pro.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3
- CWE-601 URL Redirection to Untrusted Site ('Open Redirect')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
4 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
24Monitor | CVE-2023-39938No exploit | Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitraryi-pro · video insight · CWE-79 | Medium6.1 | — | 0.5% | Sep 5, 2023 |
24Monitor | CVE-2023-38574No exploit | Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web sitei-pro · video insight · CWE-601 | Medium6.1 | — | 0.4% | Sep 5, 2023 |
21Monitor | CVE-2023-40535No exploit | Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inji-pro · video insight · CWE-79 | Medium5.4 | — | 0.4% | Sep 5, 2023 |
21Monitor | CVE-2023-40705No exploit | Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to injei-pro · video insight · CWE-79 | Medium5.4 | — | 0.4% | Sep 5, 2023 |
- CVE-2023-3993824Monitor
Reflected cross-site scripting vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to inject an arbitrary
MediumCVSS 6.1No exploitEPSS 0%i-pro · video insightSep 5, 2023
- CVE-2023-3857424Monitor
Open redirect vulnerability in VI Web Client prior to 7.9.6 allows a remote unauthenticated attacker to redirect users to arbitrary web site
MediumCVSS 6.1No exploitEPSS 0%i-pro · video insightSep 5, 2023
- CVE-2023-4053521Monitor
Stored cross-site scripting vulnerability in View setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inj
MediumCVSS 5.4No exploitEPSS 0%i-pro · video insightSep 5, 2023
- CVE-2023-4070521Monitor
Stored cross-site scripting vulnerability in Map setting page of VI Web Client prior to 7.9.6 allows a remote authenticated attacker to inje
MediumCVSS 5.4No exploitEPSS 0%i-pro · video insightSep 5, 2023