Zenitel Ip-stationweb Firmware vulnerabilities

• zenitel ip-stationweb firmware Zenitel Norway IP-StationWeb before 4.2.3.9 allows stored XSS via the Display Name for Station... CVE-2018-19927 4.8 MediumDecember 6, 2018
• zenitel ip-stationweb firmware Zenitel Norway IP-StationWeb before 4.2.3.9 allows reflected XSS via the goform/ PATH_INFO. CVE-2018-19926 6.1 MediumDecember 6, 2018