wsummerhill / BSA-Radar_CVE-Vulnerabilities

CVE submissions for the Global Radar - BSA Radar banking application

BSA Radar - CVE Submissions and Exploits

The following vulnerabilities have been disclosed to the vendor and remediated in new versions of the BSA Radar application provided by GLOBAL Radar.

1. CVE-2020-14943 - Stored XSS
2. CVE-2020-14944 - Access Control Vulnerabilities
3. CVE-2020-14945 - Privilege Escalation
4. CVE-2020-14946 - Local File Inclusion

Affected versions: BSA Radar version <= 1.6.7234.24750

The vulnerabilities have been acknowledge by the vendor, patched, and then retested as verification which have been remediated within the latest version of the application.