Advisories · Technology
ubccr xdmod.
Every CVE that names ubccr xdmod among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.3 CriticalCritical · CVSS 9+
Open XDMoD Vulnerable to Unauthenticated SQL Injection Leading to Full Database Compromise
- ubccr xdmod
- SQL injection
- CVSS 8.6 High
Open XDMoD Vulnerable to Reflected Cross-Site Scripting (XSS) in Password Reset
- ubccr xdmod
- Cross-site scripting (XSS)
- CVSS 9.3 CriticalCritical · CVSS 9+
Open XDMoD Vulnerable to Unauthenticated Remote Code Execution (RCE) via OS Command Injection
- ubccr xdmod
- Command injection
- CVSS 5.3 Medium
Open XDMoD has Broken Access Control via Client-Controlled Session Variable
- ubccr xdmod
- Broken access control