Lucene search
IcscertCVELIST:CVE-2022-40204HistoryNov 30, 2022 - 11:07 p.m.
CVE-2022-40204
2022-11-3023:07:29
CWE-79
icscert
www.cve.org
cross-site scripting
digital alert systems
dasdec software
host header
vulnerability
4.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
22.8%
A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "DASDEC",
"vendor": "Digital Alert Systems",
"versions": [
{
"status": "affected",
"version": "all"
}
]
}
]Related
prion
prion
Cross site scripting
2022-12-01 00:15:00
cve
cve
CVE-2022-40204
2022-12-01 00:15:09
nvd
nvd
CVE-2022-40204
2022-12-01 00:15:09
cnvd
cnvd
Digital Alert Systems DASDEC EAS Cross-Site Scripting Vulnerability
2022-11-25 00:00:00
ics
ics
Digital Alert Systems DASDEC
2022-11-23 12:00:00
4.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
0.001 Low
EPSS
Percentile
22.8%
Related for CVELIST:CVE-2022-40204