CVE-2012-5053

2022-10-0316:15:29

mitre

www.cve.org

cross-site scripting

trimble infrastructure gnss

receivers netr3

netr5

netr8

netr9

netrs

AI Score

5.7

Confidence

High

EPSS

0.001

Percentile

45.0%

JSON

Cross-site scripting (XSS) vulnerability in the Receiver Web User Interface on Trimble Infrastructure GNSS Series Receivers NetR3, NetR5, NetR8, and NetR9 before 4.70, and NetRS before 1.3-2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.