Vulnerabilities > Spiceworks > Spiceworks > 7.2.00195

DATE CVE VULNERABILITY TITLE RISK
2020-09-15 CVE-2020-23451 Cross-Site Request Forgery (CSRF) vulnerability in Spiceworks
Spiceworks Version <= 7.5.00107 is affected by CSRF which can lead to privilege escalation via "/settings/v1/users" function. 		6.8
6.8
2020-09-01 CVE-2020-23450 Cross-site Scripting vulnerability in Spiceworks
Spiceworks Version <= 7.5.00107 is affected by XSS.
network
spiceworks CWE-79
3.5
3.5