Dctrack

dctrack

Vendor: Sunbirddcim • 4 CVEs

CVEs (4)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-37776 1Sunbirddcim 1Dctrack Jun 20, 2025 Dec 16, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens.
CVE-2024-37775 1Sunbirddcim 1Dctrack Jun 20, 2025 Dec 16, 2024 N/A· v4 7.5 HIGH· v3 N/A· v2 Incorrect access control in Sunbird DCIM dcTrack v9.1.2 allows attackers to create or update a ticket with a location which bypasses an RBAC check.
CVE-2024-37774 1Sunbirddcim 1Dctrack Jun 20, 2025 Dec 16, 2024 N/A· v4 8.0 HIGH· v3 N/A· v2 A Cross-Site Request Forgery (CSRF) in Sunbird DCIM dcTrack v9.1.2 allows authenticated attackers to escalate their privileges by forcing an Administrator user to perform sensitive requests in some admin screens.
CVE-2024-37773 1Sunbirddcim 1Dctrack Jun 20, 2025 Dec 16, 2024 N/A· v4 4.8 MEDIUM· v3 N/A· v2 An HTML injection vulnerability in Sunbird DCIM dcTrack 9.1.2 allows attackers authenticated as administrators to inject arbitrary HTML code in an admin screen.