Filtered by vendor Lenovo Subscriptions
Filtered by product Enterprise Network Disk Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-8347 1 Lenovo 1 Enterprise Network Disk 2020-09-30 6.1 Medium
A reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's browser if a crafted url is visited, possibly through phishing.
CVE-2020-8348 1 Lenovo 1 Enterprise Network Disk 2020-09-30 6.1 Medium
A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's current browser session if a crafted url is visited, possibly through phishing.