Barco Control Room Management Suite vulnerabilities
9 vulnerabilities
Known vulnerabilities in Barco Control Room Management Suite, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2022-26972barcocontrol_room_management_suite
EPSS score0.57%
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /cgi-bin endpoint. The URL parameters are not correctly sanitized, leading to reflected XSS.CVE-2022-26971barcocontrol_room_management_suiteEPSS score0.74%
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. This upload can be executed without authentication.CVE-2022-26233barcocontrol_room_management_suiteEPSS score15.03%
Barco Control Room Management through Suite 2.9 Build 0275 was discovered to be vulnerable to directory traversal, allowing attackers to access sensitive information and components. Requests must begin with the "GET /..\.." substring.CVE-2022-26974barcocontrol_room_management_suiteEPSS score0.57%
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a file upload mechanism. Lack of input sanitization in the upload mechanism leads to reflected XSS.CVE-2022-26976barcocontrol_room_management_suiteEPSS score0.46%
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization in the upload mechanism is leads to reflected XSS.CVE-2022-26978barcocontrol_room_management_suiteEPSS score0.57%
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a URL /checklogin.jsp endpoint. The os_username parameters is not correctly sanitized, leading to reflected XSS.CVE-2022-26973barcocontrol_room_management_suiteEPSS score0.78%
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. By tweaking the license file name, the returned error message exposes internal directory path details.CVE-2022-26977barcocontrol_room_management_suiteEPSS score0.57%
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing a license file upload mechanism. Lack of input sanitization of the upload mechanism is leads to stored XSS.CVE-2022-26975barcocontrol_room_management_suiteEPSS score1.03%
Barco Control Room Management Suite web application, which is part of TransForm N before 3.14, is exposing log files without authentication.