4 matches found
Cross site scripting
Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names...
4.3CVSS6.2AI score0.00692EPSS
SaveExploits1References1Affected Software1
CVE-2018-12297
Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names...
6.1CVSS6.3AI score0.00692EPSS
SaveExploits1References1
CVE-2018-12297
CVE-2018-12297 affects Seagate NAS OS 4.3.15.1 with XSS in API error pages via URL path names. Root cause cited as insufficient validation of client data by the WEB application; impact is client-side script execution. Exploitation details/works are not provided in the documents; no remediation/ve...
6.1CVSS6.2AI score0.00692EPSS
SaveExploits1References1Affected Software1
20