CVE-2018-12297

Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names

published May 13, 2019

CVSS
—
EPSS
1%
Percentile
52.3
In the wild
Unconfirmed
What it is

Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00692 · 52.3th percentile
Published
2019-05-13T12:33Z
EPSS history
Timeline
  • 13 MAY 12:33Z
    Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names
    cvelistv5