Emerson Deltav Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

2021-08-1000:00:00

www.tenable.com

0.003 Low

EPSS

Percentile

66.1%

JSON

Cross-site scripting (XSS) vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

File data ot_500413.nasl

VendorProductVersionCPE
emersondeltav10.3.1cpe:2.3:a:emerson:deltav:10.3.1:*:*:*:*:*:*:*
emersondeltav11.3.1cpe:2.3:a:emerson:deltav:11.3.1:*:*:*:*:*:*:*
emersondeltav11.3cpe:2.3:a:emerson:deltav:11.3:*:*:*:*:*:*:*
emersondeltav9.3.1cpe:2.3:a:emerson:deltav:9.3.1:*:*:*:*:*:*:*
emersondeltav_proessentials_scientific_graph5.0.0.6cpe:2.3:a:emerson:deltav_proessentials_scientific_graph:5.0.0.6:*:*:*:*:*:*:*
emersondeltav_workstation10.3.1cpe:2.3:a:emerson:deltav_workstation:10.3.1:*:*:*:*:*:*:*
emersondeltav_workstation11.3.1cpe:2.3:a:emerson:deltav_workstation:11.3.1:*:*:*:*:*:*:*
emersondeltav_workstation11.3cpe:2.3:a:emerson:deltav_workstation:11.3:*:*:*:*:*:*:*
emersondeltav_workstation9.3.1cpe:2.3:a:emerson:deltav_workstation:9.3.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
emerson	deltav	10.3.1	cpe:2.3:a:emerson:deltav:10.3.1:::::::*
emerson	deltav	11.3.1	cpe:2.3:a:emerson:deltav:11.3.1:::::::*
emerson	deltav	11.3	cpe:2.3:a:emerson:deltav:11.3:::::::*
emerson	deltav	9.3.1	cpe:2.3:a:emerson:deltav:9.3.1:::::::*
emerson	deltav_proessentials_scientific_graph	5.0.0.6	cpe:2.3:a:emerson:deltav_proessentials_scientific_graph:5.0.0.6:::::::*
emerson	deltav_workstation	10.3.1	cpe:2.3:a:emerson:deltav_workstation:10.3.1:::::::*
emerson	deltav_workstation	11.3.1	cpe:2.3:a:emerson:deltav_workstation:11.3.1:::::::*
emerson	deltav_workstation	11.3	cpe:2.3:a:emerson:deltav_workstation:11.3:::::::*
emerson	deltav_workstation	9.3.1	cpe:2.3:a:emerson:deltav_workstation:9.3.1:::::::*