Squaredup vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

SQ

Product

Squaredup

by Squaredup · last CVE Dec 7, 2021

9

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities9 In the news0 Timeline

Severity mix

Critical 1High 0Medium 7Low 1

Severity

All severities9 Critical1 High0 Medium7 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Squaredup to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2020-9388	6.5	1%	Feb 3	CSRF protection was not present in SquaredUp before version 4.6.0 Affected: before 4.6; through 4.6
CVE-2021-40096	5.4	1%	Dec 7	A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via… Affected: before 5.3.1; before 5.3.1; before 5.3.1
CVE-2021-40094	5.4	0%	Dec 7	A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654 Affected: before 5.3.1; before 5.3.1; before 5.3.1
CVE-2021-40093	5.4	1%	Dec 7	A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via… Affected: before 5.3.1; before 5.3.1; before 5.3.1
CVE-2021-40092	5.4	1%	Dec 7	A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file Affected: before 5.3.1; before 5.3.1; before 5.3.1
CVE-2020-9390	5.4	1%	Feb 3	SquaredUp allowed Stored XSS before version 4.6.0 Affected: before 4.6
CVE-2021-40095	4.9	1%	Dec 7	An issue was discovered in SquaredUp for SCOM 5.2.1.6654 Affected: before 5.3.1; before 5.3.1; before 5.3.1