Vulnerabilities > Quadbase > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-03-15 CVE-2020-24982 Cross-Site Request Forgery (CSRF) vulnerability in Quadbase Espressdashboard 7.0
An issue was discovered in Quadbase ExpressDashboard (EDAB) 7 Update 9.
network
low complexity
quadbase CWE-352
4.3
4.3
2019-06-24 CVE-2019-9957 Cross-site Scripting vulnerability in Quadbase Espressreport ES 7.0
Stored XSS within Quadbase EspressReport ES (ERES) v7.0 update 7 allows remote attackers to execute malicious JavaScript and inject arbitrary source code into the target pages.
network
low complexity
quadbase CWE-79
5.4
5.4