Lucene search

[email protected]CVE-2021-28126

HistoryMar 19, 2021 - 4:15 a.m.

CVE-2021-28126

2021-03-1904:15:13

CWE-79

[email protected]

web.nvd.nist.gov

cve-2021-28126

tranzware

e-commerce

payment gateway

twec pg

stored xss

vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

34.0%

JSON

index.jsp in TranzWare e-Commerce Payment Gateway (TWEC PG) before 3.1.27.5 had a Stored cross-site scripting (XSS) vulnerability

Affected configurations

NVD

Node

compassplustranzware_e-commerce_payment_gatewayRange<3.1.27.5

CPENameOperatorVersion
compassplus:tranzware_e-commerce_payment_gatewaycompassplus tranzware e-commerce payment gatewaylt3.1.27.5

CPE	Name	Operator	Version
compassplus:tranzware_e-commerce_payment_gateway	compassplus tranzware e-commerce payment gateway	lt	3.1.27.5

References

gist.github.com/kukuxumushi/7436994ef395573023b79652e104a2a0

Social References

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

34.0%

JSON

Related for CVE-2021-28126

prion1 cvelist1 nvd1