Vulnerabilities > Teradici > Pcoip Management Console > Medium

DATE CVE VULNERABILITY TITLE RISK
2021-07-07 CVE-2021-35451 Cross-site Scripting vulnerability in Teradici Pcoip Management Console 20.07.0
In Teradici PCoIP Management Console-Enterprise 20.07.0, an unauthenticated user can inject arbitrary text into user browser via the Web application.
network
low complexity
teradici CWE-79
6.1
2020-08-17 CVE-2020-13183 Cross-site Scripting vulnerability in Teradici Pcoip Management Console
Reflected Cross Site Scripting in Teradici PCoIP Management Console prior to 20.07 could allow an attacker to take over the user's active session if the user is exposed to a malicious payload.
network
low complexity
teradici CWE-79
6.1
2020-08-11 CVE-2020-13174 Improper Restriction of Rendered UI Layers or Frames vulnerability in Teradici Pcoip Management Console 20.01.1/20.04
The web server in the Teradici Managament console versions 20.04 and 20.01.1 did not properly set the X-Frame-Options HTTP header, which could allow an attacker to trick a user into clicking a malicious link via clickjacking.
network
low complexity
teradici CWE-1021
6.1