Lucene search
HistoryOct 28, 2015 - 10:59 a.m.
CVE-2015-3970
cve
2015
3970
cross-site scripting
xss
vulnerabilities
web interface
janitza umg
remote attackers
html
script
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.8%
Multiple cross-site scripting (XSS) vulnerabilities in the web interface on Janitza UMG 508, 509, 511, 604, and 605 devices allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
janitzaumg_508Match-
ORjanitzaumg_509Match-
ORjanitzaumg_511Match-
ORjanitzaumg_604Match-
ORjanitzaumg_605Match-
Related
prion
prion
Cross site scripting
2015-10-28 10:59:00
cvelist
cvelist
CVE-2015-3970
2015-10-28 10:00:00
nvd
nvd
CVE-2015-3970
2015-10-28 10:59:04
nessus
nessus
ics
ics
Janitza UMG Power Quality Measuring Products Vulnerabilities
2018-08-27 12:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.9 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
52.8%
Related for CVE-2015-3970