Cross site scripting

2018-07-2617:29:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.5%

JSON

Cross-site scripting vulnerability in NEC Platforms Calsos CSDX and CSDJ series products (CSDX 1.37210411 and earlier, CSDX(P) 4.37210411 and earlier, CSDX(D) 3.37210411 and earlier, CSDX(S) 2.37210411 and earlier, CSDJ-B 01.03.00 and earlier, CSDJ-H 01.03.00 and earlier, CSDJ-D 01.03.00 and earlier, CSDJ-A 03.00.00) allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CPENameOperatorVersion
calsos_csdj-a_firmwarele03.00.00
calsos_csdj-b_firmwarele01.03.00
calsos_csdj-d_firmwarele01.03.00
calsos_csdj-h_firmwarele01.03.00
calsos_csdx\\(d\\)_firmwarele3.37210411
calsos_csdx\\(p\\)_firmwarele4.37210411
calsos_csdx\\(s\\)_firmwarele2.37210411
calsos_csdx_firmwarele1.37210411

Name	Operator	Version
calsos_csdj-a_firmware	le	03.00.00
calsos_csdj-b_firmware	le	01.03.00
calsos_csdj-d_firmware	le	01.03.00
calsos_csdj-h_firmware	le	01.03.00
calsos_csdx\\(d\\)_firmware	le	3.37210411
calsos_csdx\\(p\\)_firmware	le	4.37210411
calsos_csdx\\(s\\)_firmware	le	2.37210411
calsos_csdx_firmware	le	1.37210411