Aggregates CVE and security vulnerability intelligence across all radixiot-related products, including CVSS, EPSS, publication dates, and vulnerability intelligence data.
Historical issues mainly involve vendor risk cross-site scripting and vendor risk path handling and related problems; some flaws may lead to vendor impact file overwrite and vendor impact session compromise.
| CVE | Summary | Source | Max CVSS | EPSS % | Published | Updated |
|---|---|---|---|---|---|---|
| CVE-2024-37847 | An arbitrary file upload vulnerability in MangoOS before 5.1.4 and Mango API before 4.5.5 allows attackers to execute arbitrary code via a crafted file. | [email protected] | 8.8 | 0.58% | 2024-10-25 | 2024-11-05 |
| CVE-2024-37846 | MangoOS before 5.2.0 was discovered to contain a Client-Side Template Injection (CSTI) vulnerability via the Platform Management Edit page. | [email protected] | 4.6 | 0.17% | 2024-10-25 | 2024-11-05 |
| CVE-2024-37845 | MangoOS before 5.2.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the Active Process Command feature. | [email protected] | 7.2 | 2.73% | 2024-10-25 | 2024-11-04 |
| CVE-2024-37844 | A stored cross-site scripting (XSS) vulnerability in MangoOS before 5.2.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | [email protected] | 5.4 | 0.12% | 2024-10-25 | 2024-11-05 |