Known vulnerabilities in Vantage Velocity
Vendor:
Iteris, Inc.
Software:
Vantage Velocity
Software CPE:
cpe:2.3:a:iteris:vantage_velocity:*:*:*:*:*:*:*:*
Website:
https://www.iteris.com/
Total vulnerabilities:
4
Public exploits:
0
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (4)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU25405 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-9025 |
CWE-79 | Low | - | 17.02.2020 |
SB2020021716 |
||
| #VU25404 - Permissions, Privileges, and Access Controls CVE-2020-9024 |
CWE-264 | High | - | 17.02.2020 |
SB2020021716 |
||
| #VU25403 - Improper Authentication CVE-2020-9023 |
CWE-287 | High | - | 17.02.2020 |
SB2020021716 |
||
| #VU25402 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2020-9020 |
CWE-78 | High | - | 17.02.2020 |
SB2020021716 |