CVE-2018-18991

2018-12-0421:00:00

CWE-79

icscert

www.cve.org

EPSS

0.001

Percentile

24.8%

JSON

Reflected cross-site scripting (non-persistent) in SCADA WebServer (Versions prior to 2.03.0001) could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim’s browser.

CNA Affected

[
  {
    "product": "SCADA WebServer",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "Versions prior to 2.03.0001"
      }
    ]
  }
]

References

www.securityfocus.com/bid/106105

ics-cert.us-cert.gov/advisories/ICSA-18-338-02

EPSS

0.001

Percentile

24.8%

JSON

Related for CVELIST:CVE-2018-18991