Showing 1 vulnerability on this page for thinfinity_virtualui

Signals CISA KEV Ransomware Nuclei
cybelesoft vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Thinfinity VirtualUI before 3.0 lab.html IFRAME Injection

Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.

CWE-74Dec 16, 20211 related artifact
CVSS9.8v3.1EPSS40%PoCs1SignalsNot listed in CISA KEVNo known ransomware use1 Nuclei templateSTIX