CVE-2019-6565

Moxa IKS and EDS fails to properly validate user input, giving unauthenticated and authenticated attackers the ability to perform XSS attacks, which may be used to send a malicious script...

CVE-2019-6565

CVE-2019-6565 affects Moxa IKS and EDS web interfaces. The devices fail to properly validate user input, enabling XSS by both unauthenticated and authenticated attackers to inject scripts. Affected products include Moxa IKS and EDS (web UI), with multiple advisories noting high risk (ICS-CERT/US-...