Vulnerabilities (CVE)

Filtered by vendor Untangle Subscribe
Filtered by product Ng Firewall
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-18649 1 Untangle 1 Ng Firewall 2019-11-14 3.5 LOW 4.8 MEDIUM
When logged in as an admin user, the Title input field (under Reports) within Untangle NG firewall 14.2.0 is vulnerable to stored XSS.
CVE-2019-18648 1 Untangle 1 Ng Firewall 2019-11-14 3.5 LOW 4.8 MEDIUM
When logged in as an admin user, the Untangle NG firewall 14.2.0 is vulnerable to reflected XSS at multiple places and specific user input fields.