Vulnerabilities > Spaceapplications > Yamcs > Medium

DATE CVE VULNERABILITY TITLE RISK
2023-10-19 CVE-2023-45279 Cross-site Scripting vulnerability in Spaceapplications Yamcs 5.8.6
Yamcs 5.8.6 allows XSS (issue 1 of 2).
network
low complexity
spaceapplications CWE-79
5.4
2023-10-19 CVE-2023-45280 Cross-site Scripting vulnerability in Spaceapplications Yamcs 5.8.6
Yamcs 5.8.6 allows XSS (issue 2 of 2).
network
low complexity
spaceapplications CWE-79
5.4
2023-10-19 CVE-2023-45281 Cross-site Scripting vulnerability in Spaceapplications Yamcs 5.8.6
An issue in Yamcs 5.8.6 allows attackers to obtain the session cookie via upload of crafted HTML file.
network
low complexity
spaceapplications CWE-79
6.1