CVE-2021-27887

Cross-site Scripting XSS vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3...

Cross site scripting

Cross-site Scripting XSS vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3...

CVE-2021-27887

CVE-2021-27887 is a stored XSS vulnerability in the main dashboard of Hitachi ABB Power Grids Ellipse APM. Affected products are Ellipse APM versions prior to 5.3.0.1, prior to 5.2.0.3, and prior to 5.1.0.6. The flaw allows an authenticated user or integrated application to inject malicious data ...

The vulnerability of the Ellipse APM asset management platform, related to the lack of measures taken to protect the website structure, allows a hacker to execute a cross-site scripting attack.

The vulnerability of the Ellipse APM asset management platform is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow a malicious actor to perform a cross-site scripting attack...

NVMS ABB Ability Ellipse APM Cross Site Scripting Vulnerability

NVMS ABB Ability Ellipse APM is an application from NVMS Thailand. It provides operational status and performance insights to prevent critical asset failures while optimizing asset lifecycle costs. Ellipse APM versions prior to 5.3.0.1, 5.2.0.3, and 5.1.0.6 are vulnerable to a cross-site scriptin...

NVMS ABB Ability Ellipse APM 跨站脚本漏洞

NVMS ABB Ability Ellipse APM is an application from NVMS Thailand. It provides operational status and performance insights to prevent critical asset failures while optimizing asset lifecycle costs. Ellipse APM versions prior to 5.3.0.1, 5.2.0.3, and 5.1.0.6 are vulnerable to a cross-site scriptin...

Hitachi ABB Power Grids Ellipse APM

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Hitachi ABB Power Grids Equipment: Ellipse APM Vulnerability: Cross-site Scripting 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an authenticated user or integrated...

The vulnerability of the online service for managing enterprise assets and planning resources in resource-intensive industries like Ellipse EAM stems from the lack of measures taken to protect the website structure. This allows attackers to carry out attacks using cross-site scripting.

The vulnerability of the online service for managing enterprise assets and planning resources in resource-intensive industries exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability could allow attackers to carry out attacks using cross-site...

CVE-2021-27887

Cross-site Scripting XSS vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3...

PT-2021-2355 · Hitachi Abb Power Grids · Hitachi Abb Power Grids Ellipse Enterprise Asset Management

Name of the Vulnerable Software and Affected Versions: Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 Description: The issue arises from the lack of protection for the web page structure, allowing an attacker to exploit this weakness by...

PT-2021-2366 · Hitachi Abb Power Grids · Ellipse Enterprise Asset Management

Name of the Vulnerable Software and Affected Versions: Hitachi ABB Power Grids Ellipse Enterprise Asset Management EAM versions prior to and including 9.0.25 Description: The issue exists due to inadequate protection of the web page structure, allowing a remote attacker to exploit it and...

Ellipse Enterprise Asset Management跨站脚本漏洞

Ellipse Enterprise Asset Management Ellipse EAM is a business process management software provided by Ellipse Industrial Equipment in the United Kingdom. Ellipse Enterprise Asset Management suffers from a cross-site scripting vulnerability that can be exploited by an attacker to trick a user into...

Ellipse Enterprise Asset Management跨站脚本漏洞

Ellipse Enterprise Asset Management Ellipse EAM is a business process management software provided by Ellipse Industrial Equipment in the United Kingdom. Ellipse Enterprise Asset Management suffers from a cross-site scripting vulnerability that can be exploited by an attacker to trick a user into...

Hitachi ABB Power Grids Ellipse EAM

1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION: Exploitable remotely/low skill level to exploit Vendor: Hitachi ABB Power Grids Equipment: Ellipse EAM Vulnerabilities: Cross-site Scripting, User Interface Misrepresentation of Critical Information 2. RISK EVALUATION Successful exploitation of these...

ABB Ellipse information leakage hole reveals vulnerabilities

Ellipse is an EAM software application for asset-intensive industries. ABB Ellipse is vulnerable to an information leakage hole disclosure vulnerability that allows an attacker to discover authentication credentials by sniffing local network traffic when authenticating Ellipse to LDAP/AD using th...

CVE-2017-16731

An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 including Ellipse Select. A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by...

Authentication flaw

An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 including Ellipse Select. A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by...

CVE-2017-16731

An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 including Ellipse Select. A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by...

CVE-2017-16731

The CVE-2017-16731 entry concerns ABB Ellipse versions 8.3–8.9 (including Ellipse Select) with an unprotected transport of credentials when authenticating to LDAP/AD via LDAP. The root cause is insecure credential transmission over the network, enabling an attacker on the local network to sniff t...

CVE-2017-16731

An Unprotected Transport of Credentials issue was discovered in ABB Ellipse 8.3 through Ellipse 8.9 released prior to December 2017 including Ellipse Select. A vulnerability exists in the authentication of Ellipse to LDAP/AD using the LDAP protocol. An attacker could exploit the vulnerability by...