Loadbalancer Enterprise Va Max — known CVE vulnerabilities

Every CVE whose affected-product data names Loadbalancer Enterprise Va Max, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-18864 — CVSS 9.6 (critical): Loadbalancer.org Enterprise VA MAX before 8.3.3 has XSS because Apache HTTP Server logs are displayed.
• CVE-2020-13378 — CVSS 8.8 (high): Loadbalancer.org Enterprise VA MAX through 8.3.8 has an OS Command Injection vulnerability that allows a remote authenticated attacker to…
• CVE-2020-13377 — CVSS 8.1 (high): The web-services interface of Loadbalancer.org Enterprise VA MAX through 8.3.8 could allow an authenticated, remote, low-privileged…