Cross site scripting

2021-12-0822:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

31.5%

JSON

An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnerability an attack must be able to modify the HTTP header that is sent. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.

CPENameOperatorVersion
bosch_video_management_systemle9.0
bosch_video_management_systemge10.0
bosch_video_management_systemlt10.0.2
bosch_video_management_systemeq10.1
bosch_video_management_systemeq11.0
video_recording_managerle3.81
video_recording_managerge3.82
video_recording_managerle3.82.0057
video_recording_managerge3.83
video_recording_managerle3.83.0021

Name	Operator	Version
bosch_video_management_system	le	9.0
bosch_video_management_system	ge	10.0
bosch_video_management_system	lt	10.0.2
bosch_video_management_system	eq	10.1
bosch_video_management_system	eq	11.0
video_recording_manager	le	3.81
video_recording_manager	ge	3.82
video_recording_manager	le	3.82.0057
video_recording_manager	ge	3.83
video_recording_manager	le	3.83.0021

Rows per page:

1-10 of 121

References

psirt.bosch.com/security-advisories/bosch-sa-043434-bt.html

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for PRION:CVE-2021-23860