Security Advisory

CVE-2021-44471

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-12-22 18:06:49

Last updated 2024-09-16 23:26:35

Assigner icscert

State PUBLISHED

Description

DIAEnergie Version 1.7.5 and prior is vulnerable to stored cross-site scripting when an unauthenticated user injects arbitrary code into the parameter “name” of the script “DIAE_HandlerAlarmGroup.ashx”.

← Browse all CVEs View on cve.org ↗