Skip to content
OpenAdvisories

Vendor

Automated Logic

11 known vulnerabilities.

Products

WebCTRL 6 WebCTRL Premium Server 3 Gen5 Controllers 1 WebCtrl Server 1 Zone Controllers 1 Carrier i-Vu 0 SiteScan Web 0 WebCTRL for OEMs 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-5540

    ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting

    The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a malicious actor to compromise the client browser .

    Automated Logic Carrier i-Vu WebCTRL
  • Medium 5.4
    CVE-2024-8528

    ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter

    Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized.

    Automated Logic Carrier i-Vu WebCTRL
  • Medium 5.2
    CVE-2022-1019

    Automated Logic WebCtrl Server Open Redirection Vulnerability

    Automated Logic's WebCtrl Server Version 6.1 'Help' index pages are vulnerable to open redirection. The vulnerability allows an attacker to send a maliciously crafted URL which could result in redirecting the user to a malicious webpage or downloading a malic…

    Automated Logic WebCtrl Server