All packages
Sunbird DCIM dcTrack vulnerabilities
4 known CVE vulnerabilities in Sunbird DCIM dcTrack, translated and rated.
- CVE-2024-37776Medium
A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to inject malicious scripts or HTML on certain admin screens.
- CVE-2024-37775High
In Sunbird DCIM dcTrack version 9.1.2, incorrect access control allows attackers to create or update tickets with a location that bypasses an RBAC check.
- CVE-2024-37774High
A CSRF vulnerability in Sunbird DCIM dcTrack version 9.1.2 allows authenticated attackers to escalate privileges by forcing an administrator to perform sensitive requests on certain admin screens.
- CVE-2024-37773Medium
An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows authenticated attackers with administrator privileges to inject arbitrary HTML code in an admin screen.