Non notée
CVE-2021-27436 WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send…
Description
WebAccess/SCADA Versions 9.0 and prior is vulnerable to cross-site scripting, which may allow an attacker to send malicious JavaScript code to an unsuspecting user, which could result in hijacking of the user’s cookie/session tokens, redirecting the user to a malicious webpage and performing unintended browser actions.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Advantech WebAccess/SCADA | Versions non publiées |
Références
- us-cert.cisa.gov us-cert.cisa.gov
Chronologie
- Publiée
- Dernière modification
Autres CVE de Advantech WebAccess/SCADA
Les 10 CVE de Advantech WebAccess/SCADA →
CVE-2021-32954
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker…
Non notée
CVE-2021-32956
Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to redirection, which may allow an attacker to send a…
Non notée
CVE-2021-22669
Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA…
Non notée
CVE-2020-25161
The WADashboard component of WebAccess/SCADA Versions 9.0 and prior may allow an attacker to control or influence a path…
Non notée