Not rated

CVE-2020-27262 Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 A stored cross-site scripting (XSS) vulnerability…

Description

Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 A stored cross-site scripting (XSS) vulnerability exists in the affected products that allow an attacker to inject arbitrary web script or HTML via the filename parameter to multiple update endpoints of the administrative web interface.

Affected products and versions

Product	Affected versions	Fixed in
Innokas Yhtymä Oy Vital Signs Monitor VC150	Versions not published

Do you use Innokas Yhtymä Oy Vital Signs Monitor VC150?

Track this CVE Watch Innokas Yhtymä Oy Vital Signs Monitor VC150 Check my SBOMs

www.cveye.io/en/cve/CVE-2020-27262

Timeline

Published January 8, 2021
Last modified August 4, 2024

References

us-cert.cisa.gov us-cert.cisa.gov

Track this CVE