Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-12-08	CVE-2021-23860	Cross-site Scripting vulnerability in Bosch products An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. network low complexity bosch CWE-79	6.1
2021-12-08	CVE-2021-23861	Unspecified vulnerability in Bosch products By executing a special command, an user with administrative rights can get access to extended debug functionality on the VRM allowing an impact on integrity or availability of the installed software. network low complexity bosch	6.5
2019-05-13	CVE-2019-8952	Path Traversal vulnerability in Bosch products A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. network low complexity bosch CWE-22	6.5
2019-05-13	CVE-2019-8951	Open Redirect vulnerability in Bosch products An Open Redirect vulnerability located in the webserver affects several Bosch hardware and software products. network low complexity bosch CWE-601	6.1