Skip to content
OpenAdvisories

Vendor

Carrier

10 known vulnerabilities.

Products

i-Vu 8 Block Load 1 Zone Controllers 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.9
    CVE-2024-5540

    ALC WebCTRL Carrier i-Vu Reflected Cross-Site Scripting

    The reflective cross-site scripting vulnerability found in ALC WebCTRL and Carrier i-Vu in versions older than 8.0 affects login panels allowing a malicious actor to compromise the client browser .

    Automated Logic Carrier i-Vu WebCTRL
  • Medium 5.4
    CVE-2024-8528

    ALC WebCTRL Carrier i-Vu Reflected XSS due to unsanitized parameter

    Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized.

    Automated Logic Carrier i-Vu WebCTRL
  • Medium 5.9
    CVE-2024-8526

    Automated Logic WebCTRL and Carrier i-Vu Open Redirect

    A vulnerability in Automated Logic WebCTRL 7.0 could allow an attacker to send a maliciously crafted URL, which when visited by an authenticated WebCTRL user, could result in the redirection of the user to a malicious webpage via "index.jsp"

    Carrier Automated Logic, a Carrier company i-Vu WebCTRL