Beveiligingsadvies

CVE-2026-1630

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-05-14 13:24:14

Laatst bijgewerkt 2026-08-24 09:48:49

Toegewezen door CERT-PL

CVSS-score 5.1

Status PUBLISHED

Beschrijving

WEBCON BPS is vulnerable to Reflected XSS via one of parameters used by "/openinmobileapp" endpoint. An attacker can send a specially crafted URL that, when opened by an authenticated user, results in arbitrary JavaScript execution in the victim's browser. This issue was fixed in versions 2026.1.3.109 and 2025.2.1.293.

← Alle CVE's bekijken Bekijk op cve.org ↗