All packages
ASG-Zena Cross Platform Server vulnerabilities
3 known CVE vulnerabilities in ASG-Zena Cross Platform Server, translated and rated.
- CVE-2021-45024Critical
An XML External Entity (XXE) vulnerability in ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 by ASG Technologies (a Rocket Software Company) allows an attacker to read server files or perform SSRF attacks by processing a malicious XML document.
- CVE-2021-45026Medium
ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 is vulnerable to Cross Site Scripting (XSS), allowing injection of malicious scripts.
- CVE-2021-45025High
The vulnerability in ASG-Zena Cross Platform Server Enterprise Edition 4.2.1 involves storing sensitive information in cleartext within a cookie. An attacker can intercept this cookie and gain access to confidential data.