Security Advisory

CVE-2021-33001

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-05-16 17:52:30
Last updated 2025-04-16 16:21:09
Assigner icscert
CVSS score 6.1
State PUBLISHED

Description

xArrow SCADA versions 7.2 and prior is vulnerable to cross-site scripting due to parameter ‘bdate’ of the resource xhisvalue.htm, which may allow an unauthorized attacker to execute arbitrary code.