Lenovo Enterprise Network Disk vulnerabilities

2 CVEs affecting Lenovo Enterprise Network Disk, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-8348, published 2020-09-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-8347, published 2020-09-24. Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days. A reflective cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated…
CVE-2020-8348, published 2020-09-24. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. A DOM-based cross-site scripting (XSS) vulnerability was reported in Lenovo Enterprise Network Disk prior to version 6.1 patch 6 hotfix 4 that could allow execution of code in an authenticated user's…