Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2019-11368 | 1 Auo | 1 Solar Data Recorder | 2024-02-04 | 3.5 LOW | 5.4 MEDIUM |
Stored XSS was discovered in AUO Solar Data Recorder before 1.3.0 via the protect/config.htm addr parameter. | |||||
CVE-2019-11367 | 1 Auo | 1 Solar Data Recorder | 2024-02-04 | 7.5 HIGH | 9.8 CRITICAL |
An issue was discovered in AUO Solar Data Recorder before 1.3.0. The web portal uses HTTP Basic Authentication and provides the account and password in the WWW-Authenticate attribute. By using this account and password, anyone can login successfully. |