Known vulnerabilities in Plesk 17.5.3 Update 21

Vendor: Parallels
Software: Plesk
Version: 17.5.3 Update 21
Software CPE: cpe:2.3:a:parallels:plesk:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Plesk version 17.5.3 Update 21 Plesk 17.5.3 Update 21 is affected by 4 vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47122 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
17.5.3 Update 96, 17.8.11 Update 91 28.09.2020 SB2020062003
SB2020092802
#VU31929 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Medium
No
No
17.5.3 Update 95 27.07.2020 SB2020072743
#VU31928 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
17.5.3 Update 95 27.07.2020 SB2020072743
#VU28219 - Use of Hard-coded Credentials
CVE-2020-13166
CWE-798 High
Public exploit available
No
17.5.3 Update 95, 17.8.11 Update 89 25.05.2020 SB2020052515
SB2020072805