Cross site scripting

2022-05-0414:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

31.5%

JSON

Cross-site Scripting (XSS) vulnerability in Web UI of Secomea GateManager allows phishing attacker to inject javascript or html into logged in user session.

CPENameOperatorVersion
gatemanager_4250_firmwarelt9.7.622134021
gatemanager_4260_firmwarelt9.7.622134021
gatemanager_8250_firmwarelt9.7.622134021
gatemanager_9250_firmwarelt9.7.622134021

Name	Operator	Version
gatemanager_4250_firmware	lt	9.7.622134021
gatemanager_4260_firmware	lt	9.7.622134021
gatemanager_8250_firmware	lt	9.7.622134021
gatemanager_9250_firmware	lt	9.7.622134021

References

www.secomea.com/support/cybersecurity-advisory/

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for PRION:CVE-2022-25781