Known Vulnerabilities for Online Weather by Iblsoft
Listed below are 3 of the newest known vulnerabilities associated with "Online Weather" by "Iblsoft".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2020-9407 json | IBL Online Weather before 4.3.5a allows attackers to obtain sensitive information by reading the IWEBSERVICE_JSONRPC_COOKIE c... | 5.3 - MEDIUM | 2020-02-26 | 2023-09-28 |
| CVE-2020-9406 json | IBL Online Weather before 4.3.5a allows unauthenticated eval injection via the queryBCP method of the Auxiliary Service. | 9.8 - CRITICAL | 2020-02-26 | 2023-09-28 |
| CVE-2020-9405 json | IBL Online Weather before 4.3.5a allows unauthenticated reflected XSS via the redirect page. | 6.1 - MEDIUM | 2020-02-26 | 2023-09-28 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Iblsoft | Online Weather | 4.3.5 |