VI
Product
Virtualmin
9
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 8Low 0
Watch
Add Virtualmin to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-18208 | 6.1 | Oct 10 | Virtualmin 6.03 allows XSS via the query string, as demonstrated by the webmin_search.cgi URI Affected: 6.03 |
| CVE-2018-18207 | 6.1 | Oct 10 | Virtualmin 6.03 allows Frame Injection via the settings-editor_read.cgi file parameter Affected: 6.03 |
| CVE-2023-47099 | 5.4 | Nov 1 | A Stored Cross-Site Scripting (XSS) vulnerability in the Create Virtual Server in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via Description… Affected: 7.7 |
| CVE-2023-47097 | 5.4 | Nov 1 | A Stored Cross-Site Scripting (XSS) vulnerability in the Server Template under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via… Affected: 7.7 |
| CVE-2023-47096 | 5.4 | Nov 1 | A Reflected Cross-Site Scripting (XSS) vulnerability in the Cloudmin Services Client under System Setting in Virtualmin 7.7 allows remote attackers to inject arbitrary web script… Affected: 7.7 |
| CVE-2023-47095 | 5.4 | Nov 1 | A Stored Cross-Site Scripting (XSS) vulnerability in the Custom fields of Edit Virtual Server under System Customization in Virtualmin 7.7 allows remote attackers to inject… Affected: 7.7 |
| CVE-2023-47094 | 5.4 | Nov 1 | A Stored Cross-Site Scripting (XSS) vulnerability in the Account Plans tab of System Settings in Virtualmin 7.7 allows remote attackers to inject arbitrary web script or HTML via… Affected: 7.7 |
| CVE-2023-47098 | 4.8 | Nov 1 | A Stored Cross-Site Scripting (XSS) vulnerability in the Manage Extra Admins under Administration Options in Virtualmin 7.7 allows remote attackers to inject arbitrary web script… Affected: 7.7 |
Showing 8