Manage
ConnectWise · 2 CVEs
CVE-2017-11727
MEDIUM
services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript c…
Jul 31, 2017
CVE-2017-11726
HIGH
services/system_io/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forger…
Jul 31, 2017
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2017-11727 | services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon… | MEDIUM | 1.06% | Jul 31, 2017 |
| CVE-2017-11726 | services/system_io/actionprocessor/System.rails in ConnectWise Manage 2017.5 is vulnerable to Cross-Site Request Forgery (CSRF), as demonstrated by changing an… | HIGH | 0.48% | Jul 31, 2017 |
Showing 1 to 2 of 2 CVEs