Filtered by vendor Plesk Subscriptions
Filtered by product Onyx Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2023-43784 1 Plesk 1 Onyx 2024-05-17 7.5 High
Plesk Onyx 17.8.11 has accessKeyId and secretAccessKey fields that are related to an Amazon AWS Firehose component. NOTE: the vendor's position is that there is no security threat.
CVE-2020-11584 2 Linux, Plesk 2 Linux Kernel, Onyx 2023-11-07 6.1 Medium
A GET-based XSS reflected vulnerability in Plesk Onyx 17.8.11 allows remote unauthenticated users to inject arbitrary JavaScript, HTML, or CSS via a GET parameter.