Advisories · Technology
Network Optix Nx Witness VMS.
Every CVE that names Network Optix Nx Witness VMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 8.0 High
Cross-site scripting in Nx Witness VMS Web Administration allows session token exfiltration via a rogue peer site name
- Network Optix Nx Witness VMS
- Cross-site scripting (XSS)
- CVSS 7.5 High
CORS misconfiguration in Nx Witness VMS allows session token exfiltration via cross-origin request
- Network Optix Nx Witness VMS
- CWE-942