Rainmachine Rainmachine Web Application — known CVE vulnerabilities

Every CVE whose affected-product data names Rainmachine Rainmachine Web Application, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-6907 — CVSS 8.8 (high): A Cross Site Request Forgery (CSRF) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web…
• CVE-2018-6909 — CVSS 6.5 (medium): A missing X-Frame-Options header in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web application could be used…
• CVE-2018-6906 — CVSS 6.1 (medium): A persistent Cross Site Scripting (XSS) vulnerability in the Green Electronics RainMachine Mini-8 (2nd Generation) and Touch HD 12 web…