IcscertCVELIST:CVE-2021-27416CVE-2021-27416 Cross-site scripting in Hitachi ABB Power Grids Ellipse EAM
5.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
5.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.1%
An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containing malicious code that would then be run by the web browser. This can result in the compromise of confidential information, or even the takeover of the user’s session.
CNA Affected
[
{
"product": "Ellipse Enterprise Asset Management (EAM)",
"vendor": "Hitachi ABB Power Grids",
"versions": [
{
"lessThanOrEqual": "9.0.25",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
5.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
5.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.1%