Squaredup

squaredup

14 CVEs • 4 products

Products (4)

Click to collapse

Toggle

Dashboard Server

dashboard_server

Squaredup Ds For Scom

squaredup_ds_for_scom

CVEs (14)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-45180 1Squaredup 1Squaredup Ds For Scom Mar 18, 2025 Sep 3, 2024 N/A· v4 5.4 MEDIUM· v3 N/A· v2 SquaredUp DS for SCOM 6.2.1.11104 allows XSS.
CVE-2022-46785 1Squaredup 1Dashboard Server Nov 21, 2024 Feb 23, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 1 of 2).
CVE-2022-46784 1Squaredup 1Dashboard Server Nov 21, 2024 Feb 23, 2023 N/A· v4 6.1 MEDIUM· v3 N/A· v2 SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows open redirection. (The issue was originally found in 5.5.1 GA.)
CVE-2022-46786 1Squaredup 1Dashboard Server Nov 21, 2024 Feb 23, 2023 N/A· v4 5.4 MEDIUM· v3 N/A· v2 SquaredUp Dashboard Server SCOM edition before 5.7.1 GA allows XSS (issue 2 of 2).
CVE-2020-36645 2Squaredup Squareup 2Squalor Squalor Feb 18, 2026 Jan 7, 2023 N/A· v4 9.8 CRITICAL· v3 5.2 MEDIUM· v2 A vulnerability, which was classified as critical, was found in square squalor. This affects an unknown part. The manipulation leads to sql injection. Upgrading to version v0.0.0 is able to address this issue. The patch...Show more A vulnerability, which was classified as critical, was found in square squalor. This affects an unknown part. The manipulation leads to sql injection. Upgrading to version v0.0.0 is able to address this issue. The patch is named f6f0a47cc344711042eb0970cb423e6950ba3f93. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217623.Show less
CVE-2021-40096 1Squaredup 1Squaredup Nov 21, 2024 Dec 7, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some int...Show more A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via modification of the authorisationUrl in some integration configurations.Show less
CVE-2021-40095 1Squaredup 1Squaredup Nov 21, 2024 Dec 7, 2021 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerability (when processing remote input in the log files downloaded...Show more An issue was discovered in SquaredUp for SCOM 5.2.1.6654. The Download Log feature in System / Maintenance was susceptible to a local file inclusion vulnerability (when processing remote input in the log files downloaded by an authenticated administrator user), leading to the ability to read arbitrary files on the server filesystems.Show less
CVE-2021-40094 1Squaredup 1Squaredup Nov 21, 2024 Dec 7, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device.
CVE-2021-40093 1Squaredup 1Squaredup Nov 21, 2024 Dec 7, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via dashboard actions.
CVE-2021-40092 1Squaredup 1Squaredup Nov 21, 2024 Dec 7, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file.
CVE-2021-40091 1Squaredup 1Squaredup Nov 21, 2024 Dec 6, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An SSRF issue was discovered in SquaredUp for SCOM 5.2.1.6654.
CVE-2020-9390 1Squaredup 1Squaredup Nov 21, 2024 Feb 3, 2021 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 SquaredUp allowed Stored XSS before version 4.6.0. A user was able to create a dashboard that executed malicious content in iframe or by uploading an SVG that contained a script.
CVE-2020-9389 1Squaredup 1Squaredup Nov 21, 2024 Feb 3, 2021 N/A· v4 3.7 LOW· v3 4.3 MEDIUM· v2 A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid username due to a different response time...Show more A username enumeration issue was discovered in SquaredUp before version 4.6.0. The login functionality was implemented in a way that would enable a malicious user to guess valid username due to a different response time from invalid usernames.Show less
CVE-2020-9388 1Squaredup 1Squaredup Nov 21, 2024 Feb 3, 2021 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administrator executing arbitrary code in a HTML dashboard tile via a crafted HTML page, or by uploading a m...Show more CSRF protection was not present in SquaredUp before version 4.6.0. A CSRF attack could have been possible by an administrator executing arbitrary code in a HTML dashboard tile via a crafted HTML page, or by uploading a malicious SVG payload into a dashboard.Show less