Advisories · Technology
MileSight DeviceHub.
Every CVE that names MileSight DeviceHub among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.1 Medium
MileSight DeviceHub - CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
- MileSight DeviceHub
- Cross-site scripting (XSS)
- CVSS 9.1 CriticalCritical · CVSS 9+
MileSight DeviceHub - CWE-320: Key Management Errors
- MileSight DeviceHub
- CWE-320
- CVSS 7.5 High
MileSight DeviceHub - CWE-20 Improper Input Validation
- MileSight DeviceHub
- CWE-20
- CVSS 9.8 CriticalCritical · CVSS 9+
MileSight DeviceHub - CWE-330 Use of Insufficiently Random Values
- MileSight DeviceHub
- Weak cryptography or TLS
- CVSS 10.0 CriticalCritical · CVSS 9+
MileSight DeviceHub - CWE-305 Missing Authentication for Critical Function
- MileSight DeviceHub
- CWE-305
- CVSS 9.8 CriticalCritical · CVSS 9+
MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- MileSight DeviceHub
- Path traversal