F-Secure Radar vulnerabilities

2 CVEs affecting F-Secure Radar, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-6324, published 2018-02-16.

More from F-Secure.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-6324, published 2018-02-16. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. F-Secure Radar (on-premises) before 2018-02-15 has an Unvalidated Redirect via the ReturnUrl parameter that triggers upon a user login.
• CVE-2018-6189, published 2018-02-16. Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days. F-Secure Radar (on-premises) before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/latest/vulnerabilityscans/tags/batch…