← Back

Centra

centra

2 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Asp
asp
Centraone
centraone
Smart Connect
smart_connect
Centra
centra

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Centra
1Centra
Apr 16, 2026
May 2, 2005
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Multiple cross-site scripting (XSS) vulnerabilities in Centra 7 allow remote attackers to inject arbitrary web script or HTML via the (1) username, (2) first name, or (3) last name fields.
1Centra
3Asp
CentraoneSmart Connect
Apr 16, 2026
Dec 31, 2001
N/A· v4
N/A· v3
2.1 LOW· v2
CentraOne 5.2 and Centra ASP with basic authentication enabled creates world-writable base64 encoded log files, which allows local users to obtain cleartext passwords from decoded log files and impersonate users.