Vulnerabilities (CVE)

Filtered by vendor Ge Subscribe
Filtered by product S2024
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-16246 1 Ge 4 S2020, S2020 Firmware, S2024 and 1 more 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site and executed by the victim client.
CVE-2020-16242 1 Ge 4 S2020, S2020 Firmware, S2024 and 1 more 2024-11-21 4.3 MEDIUM 6.1 MEDIUM
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts.