CVE-2020-6876

2020-10-2615:35:08

zte

www.cve.org

zte product

xss vulnerability

web module

data theft

page destruction

EPSS

0.001

Percentile

29.2%

JSON

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the attacker could use the vulnerability to steal user cookies or destroy the page structure. This affects: eVDC ZXCLOUD-iROSV6.03.04

CNA Affected

[
  {
    "product": "eVDC",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ZXCLOUD-iROSV6.03.04"
      }
    ]
  }
]

References

support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1013782

EPSS

0.001

Percentile

29.2%

JSON

Related for CVELIST:CVE-2020-6876