Beveiligingsadvies

CVE-2024-42834

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2024-11-13 00:00:00
Laatst bijgewerkt 2024-11-18 19:28:51
Toegewezen door mitre
CVSS-score 6.1
Status PUBLISHED

Beschrijving

A stored cross-site scripting (XSS) vulnerability in the Create Customer API in Incognito Service Activation Center (SAC) UI v14.11 allows authenticated attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the lastName parameter.