Known vulnerabilities in Plesk 17.8.11 Update 75

Vendor: Parallels
Software: Plesk
Version: 17.8.11 Update 75
Software CPE: cpe:2.3:a:parallels:plesk:*:*:*:*:*:*:*:*
Website:
Total vulnerabilities: 4
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Plesk version 17.8.11 Update 75 Plesk 17.8.11 Update 75 is affected by 4 vulnerabilities: 1 high, 2 medium, 1 low Critical High Medium Low

Vulnerabilities (4)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU47122 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Medium
No
No
17.5.3 Update 96, 17.8.11 Update 91 28.09.2020 SB2020062003
SB2020092802
#VU31931 - URL Redirection to Untrusted Site ('Open Redirect')
CWE-601 Medium
No
No
17.8.11 Update 89 27.07.2020 SB2020072744
#VU31930 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
17.8.11 Update 89 27.07.2020 SB2020072744
#VU28219 - Use of Hard-coded Credentials
CVE-2020-13166
CWE-798 High
Public exploit available
No
17.5.3 Update 95, 17.8.11 Update 89 25.05.2020 SB2020052515
SB2020072805