Vulnerabilities > Ipswitch > Moveit Mobile > Medium

DATE CVE VULNERABILITY TITLE RISK
2016-02-10 CVE-2015-7679 Cross-site Scripting vulnerability in Ipswitch Moveit Mobile 1.2.0.962
Cross-site scripting (XSS) vulnerability in Ipswitch MOVEit Mobile before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the query string to mobile/.
network
ipswitch CWE-79
4.3
2016-02-10 CVE-2015-7678 Cross-Site Request Forgery (CSRF) vulnerability in Ipswitch Moveit Mobile 1.2.0.962
Multiple cross-site request forgery (CSRF) vulnerabilities in Ipswitch MOVEit Mobile 1.2.0.962 and earlier allow remote attackers to hijack the authentication of unspecified victims via unknown vectors.
network
ipswitch CWE-352
6.8
2016-02-10 CVE-2015-7675 Information Exposure vulnerability in Ipswitch Moveit DMZ and Moveit Mobile
The "Send as attachment" feature in Ipswitch MOVEit DMZ before 8.2 and MOVEit Mobile before 1.2.2 allow remote authenticated users to bypass authorization and read uploaded files via a valid FileID in the (1) serverFileIds parameter to mobile/sendMsg or (2) arg01 parameter to human.aspx.
network
low complexity
ipswitch CWE-200
4.0