Security Advisory

CVE-2020-27262

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-01-08 15:16:44
Last updated 2024-08-04 16:11:36
Assigner icscert
State PUBLISHED

Description

Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 A stored cross-site scripting (XSS) vulnerability exists in the affected products that allow an attacker to inject arbitrary web script or HTML via the filename parameter to multiple update endpoints of the administrative web interface.