Cross site scripting

2021-03-1717:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.9%

JSON

Fujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker can store an XSS payload in the PSCU_FILE_INIT field of a Save Configuration XML document. The payload is triggered in the HTTP error response pages.

CPENameOperatorVersion
serverview_remote_managementeq< 9.62f

CPE	Name	Operator	Version
	serverview_remote_management	eq	< 9.62f

References

support.ts.fujitsu.com/IndexDownload.asp?Softwareguid=C67A44AE-B022-4150-8621-C4393C007ED9

www.gruppotim.it/redteam