| CVE-2024-38512 |
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
|
7.2
High
|
Jul 26, 2024 |
| CVE-2024-38511 |
A privilege escalation vulnerability was discovered in an upload processing functionality of XCC that could allow an…
|
7.2
High
|
Jul 26, 2024 |
| CVE-2024-38510 |
A privilege escalation vulnerability was discovered in the SSH captive command shell interface that could allow an…
|
7.2
High
|
Jul 26, 2024 |
| CVE-2024-38509 |
A privilege escalation vulnerability was discovered in XCC that could allow an authenticated XCC user with elevated…
|
7.2
High
|
Jul 26, 2024 |
| CVE-2024-38508 |
A privilege escalation vulnerability was discovered in the web interface or SSH captive command shell interface of XCC…
|
7.2
High
|
Jul 26, 2024 |
| CVE-2023-0683 |
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API…
|
8.3
High
|
May 1, 2023 |
| CVE-2023-25492 |
A valid, authenticated user may be able to trigger a denial of service of the XCC web user interface or other…
|
6.3
Medium
|
May 1, 2023 |
| CVE-2023-25495 |
A valid, authenticated administrative user can query a web interface API to reveal the configured LDAP client password…
|
4.9
Medium
|
Apr 28, 2023 |
| CVE-2023-29056 |
A valid LDAP user, under specific conditions, will default to read-only permissions when authenticating into XCC
|
5.3
Medium
|
Apr 28, 2023 |
| CVE-2023-29057 |
A valid XCC user's local account permissions overrides their active directory permissions under specific configurations
|
7.3
High
|
Apr 28, 2023 |
| CVE-2023-29058 |
A valid, authenticated XCC user with read-only permissions can modify custom user roles on other user accounts and the…
|
6.4
Medium
|
Apr 28, 2023 |