Epson Eps Tse Server 8 vulnerabilities
3 vulnerabilities
Known vulnerabilities in Epson Eps Tse Server 8, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2020-28931epsoneps_tse_server_8_firmware
EPSS score0.51%
Lack of an anti-CSRF token in the entire administrative interface in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to force an administrator to execute external POST requests by visiting a malicious website.CVE-2020-28929epsoneps_tse_server_8_firmwareEPSS score1.25%
Unrestricted access to the log downloader functionality in EPSON EPS TSE Server 8 (21.0.11) allows an unauthenticated attacker to remotely retrieve administrative hashed credentials via the maintenance/troubleshoot.php?download=1 URI.CVE-2020-28930epsoneps_tse_server_8_firmwareEPSS score0.63%
A Cross-Site Scripting (XSS) issue in the 'update user' and 'delete user' functionalities in settings/users.php in EPSON EPS TSE Server 8 (21.0.11) allows an authenticated attacker to inject a JavaScript payload in the user management page that is executed by an administrator.