Advisories · Technology
Visualizer.
Every CVE that names Visualizer among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.8 Medium
Visualizer < 4.0.8 - Contributor+ Stored XSS via JSON Data Source
- Visualizer
- Cross-site scripting (XSS)
- CVSS 5.5 Medium
Visualizer < 4.0.6 - Contributor+ Arbitrary Post/Page Modification via IDOR
- Visualizer
- Broken access control
- CVSS 2.7 Low
Visualizer < 4.0.6 - Contributor+ Arbitrary Chart Deletion via deleteChart
- Visualizer
- Broken access control
- CVSS 6.5 Medium
Visualizer < 4.0.7 - Contributor+ Cross-User Chart Configuration Disclosure
- Visualizer
- Broken access control
- CVSS 6.8 Medium
Visualizer: Tables and Charts Manager < 4.0.6 - Contributor+ Server-Side Request Forgery via JSON Import
- Visualizer
- Server-side request forgery (SSRF)