Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2021-04-06	CVE-2020-13419	Path Traversal vulnerability in Openiam OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task. network low complexity openiam CWE-22	5.3
2021-04-06	CVE-2020-13418	Cross-site Scripting vulnerability in Openiam OpenIAM before 4.2.0.3 allows XSS in the Add New User feature. network low complexity openiam CWE-79	6.1

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.