CVE-2019-12167

httpGetSet/httpGet.htm on Emerson Network Power Liebert Challenger 5.1E0.5 devices allows XSS via the statusstr parameter...

CVE-2019-12167: Improper Neutralization of Input During Web Page Generation

httpGetSet/httpGet.htm on Emerson Network Power Liebert Challenger 5.1E0.5 devices allows XSS via the statusstr parameter...

PT-2019-12674

Name of the Vulnerable Software and Affected Versions Emerson Network Power Liebert Challenger version 5.1E0.5 Description The issue concerns a problem with the httpGetSet/httpGet.htm page on Emerson Network Power Liebert Challenger devices, where an XSS attack can be performed via the statusstr...