Lucene search
TR-CERTVULNRICHMENT:CVE-2024-7077HistorySep 04, 2024 - 2:24 p.m.
CVE-2024-7077 Reflected XSS in Semtek Informatics Software's Semtek Sempos
2024-09-0414:24:40
CWE-79
TR-CERT
github.com
5
cve-2024-7077
semtek sempos
reflected xss
web page generation
security vulnerability
CVSS4
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
PASSIVE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/SC:L/VI:L/SI:L/VA:N/SA:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
17.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’) vulnerability in Semtek Informatics Software Consulting Inc. Semtek Sempos allows Reflected XSS.This issue affects Semtek Sempos: through 31072024.
References
Related
nvd
nvd
CVE-2024-7077
2024-09-04 15:15:14
cvelist
cvelist
CVE-2024-7077 Reflected XSS in Semtek Informatics Software's Semtek Sempos
2024-09-04 14:24:40
cve
cve
CVE-2024-7077
2024-09-04 15:15:14
CVSS4
5.3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
PASSIVE
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/SC:L/VI:L/SI:L/VA:N/SA:N
AI Score
7.2
Confidence
High
EPSS
0.001
Percentile
17.7%
SSVC
Exploitation
none
Automatable
no
Technical Impact
partial
Related for VULNRICHMENT:CVE-2024-7077