Show filters
3 Total Results
Displaying 1-3 of 3
Sort by:
Attacker Value
Unknown

CVE-2018-10078

Disclosure Date: April 20, 2018 (last updated November 26, 2024)
Cross-site scripting (XSS) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to inject arbitrary web script or HTML via a server description.
Attacker Value
Unknown

CVE-2018-10077

Disclosure Date: April 20, 2018 (last updated November 26, 2024)
XML external entity (XXE) vulnerability in Geist WatchDog Console 3.2.2 allows remote authenticated administrators to read arbitrary files via crafted XML data.
Attacker Value
Unknown

CVE-2018-10079

Disclosure Date: April 20, 2018 (last updated November 26, 2024)
Geist WatchDog Console 3.2.2 uses a weak ACL for the C:\ProgramData\WatchDog Console directory, which allows local users to modify configuration data by updating (1) config.xml or (2) servers.xml.