This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications. A specially crafted URL by an attacker and visited by a victim can lead to arbitrary JavaScript code execution.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1272 | Exploit Third Party Advisory |
Configurations
History
20 Jul 2021, 19:34
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://talosintelligence.com/vulnerability_reports/TALOS-2021-1272 - Exploit, Third Party Advisory | |
CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 6.1 |
CPE | cpe:2.3:a:advantech:r-seenet:2.4.12:*:*:*:*:*:*:* | |
CWE | CWE-79 |
16 Jul 2021, 11:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-07-16 11:15
Updated : 2024-02-04 21:47
NVD link : CVE-2021-21802
Mitre link : CVE-2021-21802
CVE.ORG link : CVE-2021-21802
JSON object : View
Products Affected
advantech
- r-seenet
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')