Vulnerabilities > Fresenius Kabi > Vigilant Centerium > Medium

DATE CVE VULNERABILITY TITLE RISK
2022-01-21 CVE-2021-23195 Information Exposure vulnerability in Fresenius-Kabi products
Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 has the option for automated indexing (directory listing) activated.
network
low complexity
fresenius-kabi CWE-200
5.3
2022-01-21 CVE-2021-23207 Insufficiently Protected Credentials vulnerability in Fresenius-Kabi products
An attacker with physical access to the host can extract the secrets from the registry and create valid JWT tokens for the Fresenius Kabi Vigilant MasterMed version 2.0.1.3 application and impersonate arbitrary users.
local
low complexity
fresenius-kabi CWE-522
5.5
2022-01-21 CVE-2021-33848 Cross-site Scripting vulnerability in Fresenius-Kabi products
Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks.
network
low complexity
fresenius-kabi CWE-79
6.1