Lucene search

K
cvelistIcscertCVELIST:CVE-2017-13994
HistoryOct 05, 2017 - 9:00 p.m.

CVE-2017-13994

2017-10-0521:00:00
CWE-79
icscert
www.cve.org
4

EPSS

0.001

Percentile

39.1%

A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticated user of the web interface is tricked into clicking a malicious link.

CNA Affected

[
  {
    "product": "LOYTEC LVIS-3ME",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "LOYTEC LVIS-3ME"
      }
    ]
  }
]

EPSS

0.001

Percentile

39.1%

Related for CVELIST:CVE-2017-13994