Lucene search
HistoryJan 26, 2015 - 3:59 p.m.
CVE-2015-1179
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
52.0%
Multiple cross-site scripting (XSS) vulnerabilities in data_point_details.shtm in Mango Automation 2.4.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) dpid, (2) dpxid, or (3) pid parameter.
Affected configurations
Node
infinite_automation_systemsmango_automationRange≤2.4.0
Related
ics
ics
Scada-LTS Third Party Component
2023-04-25 12:00:00
prion
prion
Cross site scripting
2015-01-26 15:59:00
cvelist
cvelist
CVE-2015-1179
2015-01-26 15:00:00
packetstorm
packetstorm
Mango Automation SCADA/HMI 2.4.0 Cross Site Scripting
2015-01-22 00:00:00
securityvulns
securityvulns
CVE-2015-1179-xss-mango-automation-scada
2015-01-25 00:00:00
cve
cve
CVE-2015-1179
2015-01-26 15:59:14
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.7
Confidence
High
EPSS
0.002
Percentile
52.0%
Related for NVD:CVE-2015-1179