Skip to content

Vendor

vimbadmin vulnerabilities

2 published CVES affecting vimbadmin, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
1
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of vimbadmin alerts

Products

Latest vimbadmin CVEs

Newest publication first

  1. CVE-2017-6086 ViMbAdmin CSRF Vulnerabilities

    Published
    HighCVSS 8.8 EPSS 2.0% Public exploit

    Multiple cross-site request forgery (CSRF) vulnerabilities in the addAction and purgeAction functions in ViMbAdmin 3.0.15 allow remote attackers to hijack the authentication of logged administrators to (1) add an administrator user via a crafted POST request to <vimbadmin directo...

  2. CVE-2017-5870 ViMbAdmin Cross-site Scripting Vulnerabilities

    Published
    MediumCVSS 5.4 EPSS 1.0%

    Multiple cross-site scripting (XSS) vulnerabilities in ViMbAdmin 3.0.15 allow remote attackers to inject arbitrary web script or HTML via the (1) domain or (2) transport parameter to domain/add; the (3) name parameter to mailbox/add/did/<domain id>; the (4) goto parameter to alia...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.