Security Advisory

CVE-2021-31558

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-12-22 18:06:51

Last updated 2024-09-16 18:40:05

Assigner icscert

State PUBLISHED

Description

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “descr” of the script “DIAE_hierarchyHandler.ashx”.

← Browse all CVEs View on cve.org ↗