Lucene search
HistorySep 02, 2024 - 6:15 p.m.
CVE-2024-6920
cve-2024-6920
nac telecommunication
web page generation
cross-site scripting
nacpremium
01082024
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.7%
Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in NAC Telecommunication Systems Inc. NACPremium allows Stored XSS.This issue affects NACPremium: through 01082024.
Affected configurations
Node
nacnacpremiumRange≤2024-08-01
| Vendor | Product | Version | CPE |
|---|---|---|---|
| nac | nacpremium | * | cpe:2.3:a:nac:nacpremium:*:*:*:*:*:*:*:* |
References
Related
vulnrichment
vulnrichment
CVE-2024-6920 Stored XSS in NAC Telecommunication's NACPremium
2024-09-02 12:54:21
cvelist
cvelist
CVE-2024-6920 Stored XSS in NAC Telecommunication's NACPremium
2024-09-02 12:54:21
cve
cve
CVE-2024-6920
2024-09-02 18:15:38
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
0.001
Percentile
17.7%
Related for NVD:CVE-2024-6920