CVE-2017-13994CWE-79

A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0

published October 5, 2017

CVSS
—
EPSS
1%
Percentile
59.1
In the wild
Unconfirmed
What it is

A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticated user of the web interface is tricked into clicking a malicious link.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00895 · 59.1th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2017-10-05T21:00Z
EPSS history
Timeline
  • 05 OCT 21:00Z
    A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0
    cvelistv5