Vendor/product archive

globalradar / bsa_radar CVEs

Beta · best-effort

4 CVEs tagged to globalradar / bsa_radar — 1 Critical, 1 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to globalradar vendor archive

CVE-2020-14946

Published Jun 22, 2020

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When dow…

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2020-14945

Published Jun 22, 2020

A privilege escalation vulnerability exists within Global RADAR BSA Radar 1.6.7234.24750 and earlier that allows an authenticated, low-privileged user to escalate their privileges…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2020-14944

Published Jun 22, 2020

Global RADAR BSA Radar 1.6.7234.24750 and earlier lacks valid authorization controls in multiple functions. This can allow for manipulation and takeover of user accounts if succes…

CVSS 9.8 · Critical

Vendor/product tagsBeta · best-effort

CVE-2020-14943

Published Jun 22, 2020

The Firstname and Lastname parameters in Global RADAR BSA Radar 1.6.7234.24750 and earlier are vulnerable to stored cross-site scripting (XSS) via Update User Profile.

CVSS 5.4 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-4 of 4 CVEsPage 1 of 1