← Back

Yacms

yacms

Vendor: Spaceapplications • 3 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Spaceapplications
1Yacms
Jun 17, 2026
Nov 20, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
An issue in Yamcs 5.8.6 allows attackers to send aribitrary telelcommands in a Command Stack via Clickjacking.
1Spaceapplications
1Yacms
Jun 17, 2026
Nov 20, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via the text variable scriptContainer of the ScriptViewer.
1Spaceapplications
1Yacms
Jun 17, 2026
Nov 20, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Cross Site Scripting vulnerability in Space Applications Services Yamcs v.5.8.6 allows a remote attacker to execute arbitrary code via crafted telecommand in the timeline view of the ArchiveBrowser.