Advisories · Technology
Carrier i-Vu.
Every CVE that names Carrier i-Vu among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.0 High
Automated Logic WebCTRL and Carrier i-Vu Session Fixation
- Automated Logic WebCTRL
- Carrier i-Vu
- CWE-257
- CVSS 6.9 Medium
ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting
- Automated Logic WebCTRL
- Carrier i-Vu
- Cross-site scripting (XSS)
- CVSS 9.2 CriticalCritical · CVSS 9+
ALC WebCTRL Carrier i-Vu Access Control Bypass
- Automated Logic WebCTRL
- Carrier i-Vu
- Broken access control
- CVSS 8.8 High
ALC WebCTRL Carrier i-Vu and Gen5 Controllers Array Index out-of-range
- Automated Logic WebCtrl
- Automated Logic Gen5 Controllers
- CWE-129
- CWE-248
- CVSS 5.4 Medium
ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter
- Automated Logic WebCtrl
- Carrier i-Vu
- Cross-site scripting (XSS)
- CVSS 8.6 High
ALC WebCTRL Carrier i-Vu Open Redirect via URL parameter
- Automated Logic WebCtrl
- Carrier i-Vu
- Open redirect
- CVSS 10.0 CriticalCritical · CVSS 9+
Automated Logic WebCTRL and Carrier i-Vu Unrestricted File Upload
- Automated Logic, a Carrier company WebCTRL
- Carrier i-Vu
- Unrestricted file upload
- CVSS 5.9 Medium
Automated Logic WebCTRL and Carrier i-Vu Open Redirect
- Automated Logic, a Carrier company WebCTRL
- Carrier i-Vu
- Open redirect