Design/Logic Flaw

2021-12-0713:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.0%

JSON

A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user’s device.

CPENameOperatorVersion
squareduplt5.3.1
squareduplt5.3.1
squareduplt5.3.1

Name	Operator	Version
squaredup	lt	5.3.1
squaredup	lt	5.3.1
squaredup	lt	5.3.1

References

support.squaredup.com

support.squaredup.com/hc/en-us/articles/4410656395537-CVE-2021-40094-DOM-based-stored-cross-site-scripting