CVE-2021-33021

xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisalarm.htm, which may allow an unauthorized attacker to execute arbitrary code...

CVE-2021-33021

xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisalarm.htm, which may allow an unauthorized attacker to execute arbitrary code...

CVE-2021-33021: Improper Neutralization of Input During Web Page Generation

xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘edate’ of the resource xhisalarm.htm, which may allow an unauthorized attacker to execute arbitrary code...

The vulnerability of the “edate” parameter in the xhisalarm.htm component of the HMI/SCADA application xArrow allows attackers to perform cross-site scripting attacks.

The vulnerability of the “edate” parameter in the xhisalarm.htm component of the HMI/SCADA application xArrow is related to the lack of measures taken to protect the web page structure. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...

PT-2021-4445

Name of the Vulnerable Software and Affected Versions xArrow SCADA versions 7.2 and prior Description The issue is related to a cross-site scripting vulnerability due to the edate parameter of the xhisalarm.htm resource. This may allow an unauthorized attacker to execute arbitrary code. The...