Advantech WebAccess Cross-Site Scripting

🗓️ 16 May 2013 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 40 Views

Advantech WebAccess Cross-Site Scripting vulnerability in WebAccess 7.0 and prior could allow remote attackers to execute arbitrary HTML code in user's browser. Mitigation patch available

Reporter	Title	Published	Views	Family All 11
Tenable Nessus	Advantech WebAccess < 7.1-2013.05.30 Multiple Vulnerabilities	14 Feb 201700:00	–	nessus
Tenable Nessus	Advantech WebAccess Stored Cross-Site Scripting	14 Apr 201400:00	–	nessus
CVE	CVE-2013-2299	22 Aug 201301:00	–	cve
Cvelist	CVE-2013-2299	22 Aug 201301:00	–	cvelist
Exploit DB	Advantech Webaccess HMI/SCADA Software - Persistence Cross-Site Scripting	8 Jan 201300:00	–	exploitdb
EUVD	EUVD-2013-2245	7 Oct 202500:30	–	euvd
NVD	CVE-2013-2299	22 Aug 201305:34	–	nvd
Prion	Cross site scripting	22 Aug 201305:34	–	prion
Positive Technologies	PT-2013-3643	22 Aug 201300:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2013-2299: Improper Neutralization of Input During Web Page Generation	22 Aug 201300:00	–	rapid7

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2013/icsa-13-225-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-13-225-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/topics/industrial-control-systems
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014

16 May 2013 06:00Current

5.7Medium risk

Vulners AI Score5.7

CVSS 23.5

EPSS0.01439