Cross site scripting

2023-02-2715:15:00

PRIOn knowledge base

www.prio-n.com

web-based management

cross site scripting

reflected attacks

confidentiality

integrity

availability

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%

JSON

The configuration backend of the web-based management is vulnerable to reflected XSS (Cross-Site Scripting) attacks that targets the users browser. This leads to a limited impact of confidentiality and integrity but no impact of availability.

CPENameOperatorVersion
751-9301_firmwarege16
751-9301_firmwarelt22
751-9301_firmwareeq22
751-9301_firmwareeq23
752-8303\\/8000-002_firmwarege18
752-8303\\/8000-002_firmwarelt22
752-8303\\/8000-002_firmwareeq22
752-8303\\/8000-002_firmwareeq23
pfc100_firmwarege16
pfc100_firmwarelt22

Name	Operator	Version
751-9301_firmware	ge	16
751-9301_firmware	lt	22
751-9301_firmware	eq	22
751-9301_firmware	eq	23
752-8303\\/8000-002_firmware	ge	18
752-8303\\/8000-002_firmware	lt	22
752-8303\\/8000-002_firmware	eq	22
752-8303\\/8000-002_firmware	eq	23
pfc100_firmware	ge	16
pfc100_firmware	lt	22