Dmasoftlab Dma Radius Manager — known CVE vulnerabilities

Every CVE whose affected-product data names Dmasoftlab Dma Radius Manager, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-29012 — CVSS 9.8 (critical): DMA Softlab Radius Manager 4.4.0 assigns the same session cookie to every admin session. The cookie is valid when the admin is logged in…
• CVE-2021-29011 — CVSS 6.1 (medium): DMA Softlab Radius Manager 4.4.0 is affected by Cross Site Scripting (XSS) via the description, name, or address field (under admin.php).