Cross site scripting

2020-11-1922:15:00

PRIOn knowledge base

www.prio-n.com

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.4%

JSON

A CWE-79 Multiple Improper Neutralization of Input During Web Page Generation (Cross-site Scripting Reflected) vulnerability exists in EcoStruxure Building Operation WebReports V1.9 - V3.1 that could cause a remote attacker to inject arbitrary web script or HTML due to incorrect sanitization of user supplied data and achieve a Cross-Site Scripting reflected attack against other WebReport users.

CPENameOperatorVersion
webreportsge1.9
webreportsle3.1

CPE	Name	Operator	Version
	webreports	ge	1.9
	webreports	le	3.1

References

www.se.com/ww/en/download/document/SEVD-2020-315-04/