Steelcase Roomwizard Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Steelcase Roomwizard Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2018-7055 — CVSS 7.5 (high): GroupViewProxyServlet in RoomWizard before 4.4.x allows SSRF via the url parameter.
• CVE-2018-7057 — CVSS 6.1 (medium): RoomWizard before 4.4.x allows XSS via the HelpAction.action pageName parameter.
• CVE-2018-7056 — CVSS 5.3 (medium): RoomWizard before 4.4.x allows remote attackers to obtain potentially sensitive information about IP addresses via /getGroupTimeLineJSON.act…