Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2020-12-14	CVE-2020-28861	Improper Neutralization of Formula Elements in a CSV File vulnerability in Openasset Digital Asset Management OpenAsset Digital Asset Management (DAM) 12.0.19 and earlier failed to implement access controls on /Stream/ProjectsCSV endpoint, allowing unauthenticated attackers to gain access to potentially sensitive project information stored by the application. network low complexity openasset CWE-1236	5.3
2020-12-14	CVE-2020-28859	Cross-site Scripting vulnerability in Openasset Digital Asset Management OpenAsset Digital Asset Management (DAM) through 12.0.19 does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for reflected cross-site scripting attacks. network low complexity openasset CWE-79	6.1
2020-12-14	CVE-2020-28857	Cross-site Scripting vulnerability in Openasset Digital Asset Management OpenAsset Digital Asset Management (DAM) through 12.0.19, does not correctly sanitize user supplied input in multiple parameters and endpoints, allowing for stored cross-site scripting attacks. network low complexity openasset CWE-79	6.1