Non notée
CVE-2021-22676 UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could allow an attacker to…
Description
UserExcelOut.asp within WebAccess/SCADA is vulnerable to cross-site scripting (XSS), which could allow an attacker to send malicious JavaScript code. This could result in hijacking of cookie/session tokens, redirection to a malicious webpage, and unintended browser action on the WebAccess/SCADA (WebAccess/SCADA versions prior to 8.4.5, WebAccess/SCADA versions prior to 9.0.1).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| WebAccess/SCADA | Versions non publiées |
Autres CVE de WebAccess/SCADA
Les 4 CVE de WebAccess/SCADA →
CVE-2021-32943
The affected product is vulnerable to a stack-based buffer overflow, which may allow an attacker to remotely execute…
Non notée
CVE-2021-22674
The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to…
Non notée
CVE-2018-18999
WebAccess/SCADA, WebAccess/SCADA Version 8.3.2 installed on Windows 2008 R2 SP1
Non notée