Search/CVE-2021-32005
● CVE — Medium

CVE-2021-32005

VendorsecomeaProductsitemanager 1129 firmware, sitemanager 1139 firmware, sitemanager 1149 firmware, sitemanager 3329 firmware, sitemanager 3339 firmware, sitemanager 3349 firmware, sitemanager 3529 firmware, sitemanager 3539 firmware, sitemanager 3549 firmwareDiscoveredMar 10, 2022UpdatedNov 21, 2024

Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions.

View graph Watch Export
CVSS v3.1
6.5 MEDIUM
EPSS
0.59%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
CVSS v3.1 Detail
Attack VectorNETWORK
Attack ComplexityLOW
Privileges RequiredLOW
User InteractionREQUIRED
ScopeCHANGED
ConfidentialityLOW
IntegrityLOW
AvailabilityLOW
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Connections
10 relationships
Timeline
disclosure → media coverage
Mar 10, 2022
Disclosure — published as a CVE record. · last revised by NVD Nov 21, 2024