Virtualmin 7.7

CPE Details

Virtualmin 7.7
virtualmin
virtualmin
7.7
2023-12-29
17h02 +00:00
2023-12-29
17h02 +00:00
CPE NVD
Alerte pour un CPE
Stay informed of any changes for a specific CPE.
Notifications manage

CPE Name: cpe:2.3:a:virtualmin:virtualmin:7.7:*:*:*:*:*:*:*

Informations

Vendor

virtualmin

Product

virtualmin

Version

7.7

Related CVE

Open and find in CVE List

CVE ID Published Description Score Severity
CVE-2024-45692 2024-09-03 22h00 +00:00 Webmin before 2.202 and Virtualmin before 7.20.2 allow a network traffic loop via spoofed UDP packets on port 10000.
7.5
High
CVE-2023-47094 2023-10-30 23h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Plan name field while editing Account plan details.
5.4
Medium
CVE-2023-47095 2023-10-30 23h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Batch Label field while details of Virtual Server.
5.4
Medium
CVE-2023-47096 2023-10-30 23h00 +00:00 A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Cloudmin services master field.
5.4
Medium
CVE-2023-47097 2023-10-30 23h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the Template name field while creating server templates.
5.4
Medium
CVE-2023-47098 2023-10-30 23h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via the real name or description field.
4.8
Medium
CVE-2023-47099 2023-10-30 23h00 +00:00 A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via Description field while creating the Virtual server.
5.4
Medium