← Back

Steelcase

steelcase

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Roomwizard Firmware
roomwizard_firmware
3 CVEs
Roomwizard
roomwizard
0 CVEs

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2018-7057
1Steelcase
1Roomwizard Firmware
Nov 21, 2024
Feb 15, 2018
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter.
CVE-2018-7056
1Steelcase
1Roomwizard Firmware
Nov 21, 2024
Feb 15, 2018
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.action.
CVE-2018-7055
1Steelcase
1Roomwizard Firmware
Nov 21, 2024
Feb 15, 2018
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter.