This CPE summary could be partial or incomplete. Please contact us for a detailed listing.

Summary

Summuary
CPE Name cpe:/a:homeseer:homeseer_hs2:2.5.0.20
Detail
Vendor Homeseer First view 2011-12-14
Product Homeseer hs2 Last view 2011-12-14
Version 2.5.0.20 Type Application
Edition  
Language  
Update  
 
CPE Product cpe:/a:homeseer:homeseer_hs2

Activity : Overall

Related : CVE

 DateAlertAccess VectorAccess ComplexityAuthentication
6.8 2011-12-14 CVE-2011-4837 Network Medium None Requ...
4.3 2011-12-14 CVE-2011-4836 Network Medium None Requ...
7.5 2011-12-14 CVE-2011-4835 Network Low None Requ...

CWE : Common Weakness Enumeration

%idName
33% (1)CWE-352Cross-Site Request Forgery (CSRF)
33% (1)CWE-79Failure to Preserve Web Page Structure ('Cross-site Scripting')
33% (1)CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path ...

Open Source Vulnerability Database (OSVDB)

idDescription
77589HomeSeer HS2 Web Interface/ctrl URL Admin Command CSRF
77588HomeSeer HS2 Web Interface Log Viewer Page URI XSS
77587HomeSeer HS2 Web Interface Traversal Arbitrary File Access

OpenVAS Exploits

idDescription
2011-12-20Name : HomeSeer HS2 Web Interface Multiple Vulnerabilities
File : nvt/secpod_homeseer_hs2_web_interface_mult_vuln.nasl