Steve Nyan Lin

**Name of the Vulnerable Software and Affected Versions** WaveSuite (affected versions not specified) **Description** Insufficient role-based access control in the CPB Log Files feature allows an authenticated low-privilege user to access pages restricted to higher-privilege roles by requesting the corresponding URL directly in the browser. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** NSP (affected versions not specified) **Description** Stored Cross-Site Scripting (XSS) occurs due to insufficient validation or encoding of user-controlled input within a workflow application. An authenticated attacker with access to the workflow application can embed malicious code that executes when another user views the affected content. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Nokia NSP (affected versions not specified) **Description** NSP is susceptible to an open redirect, which occurs when an application redirects a user to an external site without proper validation. This issue is caused by insufficient server-side validation of the `URL` (or `redirect`) parameter. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Firefox versions prior to 79 Firefox ESR versions prior to 78.1 Thunderbird versions prior to 78.1 **Description** The issue allows an attacker to load attacker-supplied DLL files from the installation directory, but this requires the attacker to already have the capability to place files in the installation directory. This problem is specific to Windows operating systems, with other operating systems being unaffected. **Recommendations** For Firefox versions prior to 79, update to version 79 or later. For Firefox ESR versions prior to 78.1, update to version 78.1 or later. For Thunderbird versions prior to 78.1, update to version 78.1 or later.