Skip to content
OpenAdvisories

Product · Automated Logic

WebCTRL

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-5540

    ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting

    The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a malicious actor to compromise the client browser .

    Automated Logic Carrier i-Vu WebCTRL
  • Medium 5.4
    CVE-2024-8528

    ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter

    Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized.

    Automated Logic Carrier i-Vu WebCTRL