CVE-2021-27414

An attacker could trick a user of Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 into visiting a malicious website posing as a login page for the Ellipse application and gather authentication credentials...

The vulnerability of the Ellipse APM asset management platform, related to the lack of measures taken to protect the website structure, allows a hacker to execute a cross-site scripting attack.

The vulnerability of the Ellipse APM asset management platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack...

PT-2021-2355 · Hitachi Abb Power Grids · Hitachi Abb Power Grids Ellipse Enterprise Asset Management

Name of the Vulnerable Software and Affected Versions: Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 Description: The issue arises from the lack of protection for the web page structure, allowing an attacker to exploit this weakness by...

Ellipse Enterprise Asset Management跨站脚本漏洞

Ellipse Enterprise Asset Management Ellipse EAM is a business process management software provided by Ellipse Industrial Equipment in the United Kingdom. Ellipse Enterprise Asset Management suffers from a cross-site scripting vulnerability that can be exploited by an attacker to trick a user into...

Ellipse Enterprise Asset Management跨站脚本漏洞

Ellipse Enterprise Asset Management Ellipse EAM is a business process management software provided by Ellipse Industrial Equipment in the United Kingdom. Ellipse Enterprise Asset Management suffers from a cross-site scripting vulnerability that can be exploited by an attacker to trick a user into...