Skip to content
Noroxi

webport records

7 published records for vendor webport.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

7 records
  • CVE-2020-18667
    39Monitor

    SQL Injection vulnerability in WebPort <=1.19.1 via the new connection, parameter name in type-conn.

    CriticalCVSS 9.8No exploitEPSS 1%

    webport · webportJun 24, 2021

  • CVE-2019-12461
    27Monitor

    Web Port 1.19.1 allows XSS via the /log type parameter.

    MediumCVSS 6.1Proof of conceptEPSS 10%

    webport · web portMay 30, 2019

  • CVE-2019-12460
    25Monitor

    Web Port 1.19.1 allows XSS via the /access/setup type parameter.

    MediumCVSS 6.1Proof of conceptEPSS 4%

    webport · web portMay 30, 2019

  • CVE-2020-18665
    21Monitor

    Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings.

    MediumCVSS 5.3No exploitEPSS 2%

    webport · web portJun 24, 2021

  • CVE-2020-18668
    21Monitor

    Cross Site Scripting (XSS) vulnerabililty in WebPort <=1.19.1 via the description parameter to script/listcalls.

    MediumCVSS 5.4No exploitEPSS 1%

    webport · web portJun 24, 2021

  • CVE-2020-18664
    21Monitor

    Cross Site Scripting (XSS) vulnerability in WebPort <=1.19.1via the connection name parameter in type-conn.

    MediumCVSS 5.4No exploitEPSS 1%

    webport · web portJun 24, 2021

  • CVE-2020-23659
    21Monitor

    WebPort-v1.19.17121 is affected by Cross Site Scripting (XSS) on the "connections" feature.

    MediumCVSS 5.4No exploitEPSS 1%

    webport · web portAug 26, 2020