Lucene search

IcscertCVE-2021-42535

HistoryJul 27, 2022 - 9:15 p.m.

CVE-2021-42535

2022-07-2721:15:08

CWE-79

icscert

web.nvd.nist.gov

cve-2021-42535

nvd

visam vbase

security vulnerability

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

39.8%

JSON

VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output used as a public-facing webpage.

Affected configurations

Nvd

Node

visamvbase_web-remoteMatch11.6.0.6

VendorProductVersionCPE
visamvbase_web-remote11.6.0.6cpe:2.3:a:visam:vbase_web-remote:11.6.0.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
visam	vbase_web-remote	11.6.0.6	cpe:2.3:a:visam:vbase_web-remote:11.6.0.6:::::::*

CNA Affected

[
  {
    "product": "VBASE Pro-RT/ Server-RT (Web Remote)",
    "vendor": "VISAM",
    "versions": [
      {
        "status": "affected",
        "version": "version 11.6.0.6"
      }
    ]
  }
]

References

www.cisa.gov/uscert/ics/advisories/icsa-21-308-01

Social References

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

39.8%

JSON

Related for CVE-2021-42535