Lucene search
DIVDCVELIST:CVE-2023-22585HistoryJun 11, 2023 - 1:17 p.m.
CVE-2023-22585 Reflected Cross-Site Scripting in Danfoss AK-EM100
2023-06-1113:17:01
CWE-79
DIVD
www.cve.org
danfoss
ak-em100
reflected cross-site scripting
web applications
title parameter
9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.3%
The Danfoss AK-EM100 web applications allow for Reflected Cross-Site Scripting in the title parameter.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "AK-EM100",
"vendor": "Danfoss",
"versions": [
{
"status": "affected",
"version": "< 2.2.0.12"
}
]
}
]Related
cve
cve
CVE-2023-22585
2023-06-11 14:15:09
nvd
nvd
CVE-2023-22585
2023-06-11 14:15:09
prion
prion
Cross site scripting
2023-06-11 14:15:00
9 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
8.6 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
41.3%
Related for CVELIST:CVE-2023-22585