Leostream Connection Broker — known CVE vulnerabilities

Every CVE whose affected-product data names Leostream Connection Broker, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2020-26574 — CVSS 9.6 (critical): Leostream Connection Broker 8.2.x is affected by stored XSS. An unauthenticated attacker can inject arbitrary JavaScript code via the…
• CVE-2018-18817 — CVSS 7.5 (high): The Leostream Agent before Build 7.0.1.0 when used with Leostream Connection Broker 8.2.72 or earlier allows remote attackers to modify…
• CVE-2021-41550 — CVSS 7.2 (high): Leostream Connection Broker 9.0.40.17 allows administrator to upload and execute Perl code.
• CVE-2021-38157 — CVSS 6.1 (medium): LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter. NOTE: This…
• CVE-2021-41551 — CVSS 4.9 (medium): Leostream Connection Broker 9.0.40.17 allows administrators to conduct directory traversal attacks by uploading z ZIP file that contains a…