Lucene search
+L

193 matches found

BDU FSTEC
BDU FSTEC
•added 2025/09/09 12:00 a.m.•16 views

The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, is related to the lack of protective measures for the web page structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the multi-platform web solution for creating Scada systems is related to the lack of protection for the structure of the web page when processing parameters for the end-point mailinglists.shtm. Exploiting this vulnerability allows a remote attacker to perform cross-site...

4CVSS5.7AI score0.00362EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/09/09 12:00 a.m.•14 views

The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, is related to the lack of protective measures for the web page structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the multi-platform web solution for creating Scada systems is related to the lack of protection measures for the web page structure during the processing of the end-point pointHierarchy/new/. Exploiting this vulnerability allows a malicious actor to perform cross-site scripti...

4CVSS5.6AI score0.00285EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/09/09 12:00 a.m.•15 views

The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, is related to the lack of protective measures for the web page structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the multi-platform web solution for creating Scada systems is related to the lack of protection for the structure of the web page when processing the parameter “name” of the final point “publisheredit.shtm”. Exploiting this vulnerability allows a remote attacker to perform...

4CVSS5.7AI score0.00362EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/09/09 12:00 a.m.•17 views

The vulnerability of the multi-platform web solution for creating Scada systems, Scada-LTS, is related to the lack of protective measures for the web page structure. This allows attackers to perform cross-site scripting attacks.

The vulnerability of the multi-platform web solution for creating Scada systems is related to the lack of protection for the web page structure when processing the alias parameter of the scheduledevents.shtm endpoint. Exploiting this vulnerability allows a remote attacker to perform cross-site...

4CVSS5.7AI score0.00291EPSS
SaveExploits1References4Affected Software1
RedhatCVE
RedhatCVE
•added 2025/08/30 6:20 p.m.•22 views

CVE-2025-9404

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.4CVSS3.3AI score0.00282EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
•added 2025/08/26 1:14 p.m.•19 views

CVE-2025-9388

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watchlist.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be...

5.4CVSS6.5AI score0.00285EPSS
SaveExploits1References1
NVD
NVD
•added 2025/08/25 3:15 a.m.•25 views

CVE-2025-9404

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.4CVSS0.00282EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/25 2:32 a.m.•46 views

CVE-2025-9404

CVE-2025-9404 concerns Scada-LTS versions up to 2.7.8.1. The vulnerability is a stored/remote cross-site scripting flaw in an unknown function within the /pointHierarchySLTS file of the Folder Handler component. The attack is triggered by manipulating the Title argument, and the exploit is public...

5.4CVSS6.5AI score0.00282EPSS
SaveExploits1References5Affected Software1
Cvelist
Cvelist
•added 2025/08/25 2:32 a.m.•34 views

CVE-2025-9404 Scada-LTS Folder pointHierarchySLTS cross site scripting

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

4.8CVSS0.00282EPSS
SaveExploits1References5
Mend
Mend
•added 2025/08/25 2:32 a.m.•5 views

CVE-2025-9404

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.4CVSS0.00282EPSS
SaveExploits1References7
OSV
OSV
•added 2025/08/25 2:32 a.m.•13 views

CVE-2025-9404 Scada-LTS Folder pointHierarchySLTS cross site scripting

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

4.8CVSS4.2AI score
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/25 12:00 a.m.•9 views

CVE-2025-9404: Improper Neutralization of Input During Web Page Generation

A vulnerability was identified in Scada-LTS up to 2.7.8.1. The affected element is an unknown function of the file /pointHierarchySLTS of the component Folder Handler. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit...

5.4CVSS4AI score0.00282EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2025/08/25 12:00 a.m.•21 views

Scada-LTS 安全漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A security vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which stems from cross-site scripting in the Title parameter in the file /pointHierarchySLTS...

5.4CVSS3.8AI score0.00282EPSS
SaveExploits1References5
NVD
NVD
•added 2025/08/24 1:15 p.m.•19 views

CVE-2025-9388

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watchlist.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be...

5.4CVSS0.00285EPSS
SaveExploits1References5
OSV
OSV
•added 2025/08/24 12:32 p.m.•18 views

CVE-2025-9388 Scada-LTS watch_list.shtm cross site scripting

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watchlist.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be...

5.1CVSS4.2AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2025/08/24 12:32 p.m.•14 views

CVE-2025-9388 Scada-LTS watch_list.shtm cross site scripting

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watchlist.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be...

5.1CVSS6.5AI score0.00285EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2025/08/24 12:32 p.m.•30 views

CVE-2025-9388 Scada-LTS watch_list.shtm cross site scripting

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watchlist.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be...

5.1CVSS0.00285EPSS
SaveExploits1References5
CVE
CVE
•added 2025/08/24 12:32 p.m.•46 views

CVE-2025-9388

CVE-2025-9388 affects Scada-LTS up to version 2.7.8.1. The vulnerability is a cross-site scripting issue in the watch_list.shtm file caused by manipulation of the Name argument, with remote exploitability. Publicly disclosed exploits exist. Remediation guidance across connected sources recommends...

5.4CVSS3.8AI score0.00285EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
•added 2025/08/24 12:00 a.m.•21 views

Scada-LTS 安全漏洞

Scada-LTS is an open source, web-based, multi-platform solution from Scada-LTS Open Source. A security vulnerability exists in Scada-LTS version 2.7.8.1 and earlier, which originates from cross-site scripting and could lead to remote attacks...

5.4CVSS4.4AI score0.00285EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/08/24 12:00 a.m.•4 views

CVE-2025-9388: Improper Neutralization of Input During Web Page Generation

A vulnerability was determined in Scada-LTS up to 2.7.8.1. This impacts an unknown function of the file watchlist.shtm. Executing manipulation of the argument Name can lead to cross site scripting. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be...

5.4CVSS4AI score0.00285EPSS
SaveExploits1References1
Rows per page
Query Builder