6 matches found
Cross site scripting
Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names...
CVE-2018-12297
Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names...
CVE-2018-12297
Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names...
CVE-2018-12297
CVE-2018-12297 affects Seagate NAS OS 4.3.15.1 with XSS in API error pages via URL path names. Root cause cited as insufficient validation of client data by the WEB application; impact is client-side script execution. Exploitation details/works are not provided in the documents; no remediation/ve...
CVE-2018-12297: Improper Neutralization of Input During Web Page Generation
Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names...
PT-2019-8884
Name of the Vulnerable Software and Affected Versions Seagate NAS OS version 4.3.15.1 Description The issue concerns cross-site scripting in API error pages, allowing attackers to execute JavaScript via URL path names. Recommendations For Seagate NAS OS version 4.3.15.1, update to a newer version...