Aat Novus Management System — known CVE vulnerabilities

Every CVE whose affected-product data names Aat Novus Management System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-34820 — CVSS 7.5 (high): Web Path Directory Traversal in the Novus HTTP Server. The Novus HTTP Server is affected by the Directory Traversal for Arbitrary File…
• CVE-2021-34821 — CVSS 6.1 (medium): Cross Site Scripting (XSS) vulnerability exists in AAT Novus Management System through 1.51.2. The WebUI has wrong HTTP 404 error handling…