← Back

Freebox Os

freebox_os

Vendor: Free • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-9382
1Free
1Freebox Os
Nov 21, 2024
Jan 13, 2020
N/A· v4
6.5 MEDIUM· v3
4.3 MEDIUM· v2
Freebox OS Web interface 3.0.2 has CSRF which can allow VPN user account creation
CVE-2014-9405
1Free
1Freebox Os
Nov 21, 2024
Jan 6, 2020
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
A Cross-Site Scripting (XSS) vulnerability exists in the description field of an Download RSS item or Contacts in Freebox OS Web interface 3.0.2, which allows malicious users to execute arbitrary code.