EPS TSE Server 8 Firmware

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-16	CVE-2020-28931	Cross-Site Request Forgery (CSRF) vulnerability in Epson EPS TSE Server 8 Firmware 21.0.11 Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website. network epson CWE-352	6.8
2020-12-16	CVE-2020-28930	Cross-site Scripting vulnerability in Epson EPS TSE Server 8 Firmware 21.0.11 A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the user management page that is executed by an administrator. network epson CWE-79	3.5
2020-12-16	CVE-2020-28929	Insufficiently Protected Credentials vulnerability in Epson EPS TSE Server 8 Firmware 21.0.11 Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?download=1 URI. network low complexity epson CWE-522	7.5