CVE-2019-10887

A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82.130611 allows remote attackers to…

published April 5, 2019

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82.130611 allows remote attackers to inject arbitrary HTML elements via a /DataLog.csv?log= or /AlarmLog.csv?log= or /waitlog.cgi?name= or /chart.shtml?data= or /createlog.cgi?name= request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05817 · 93.1th percentile
Published
2019-04-05T17:26Z
EPSS history
Timeline
  • 05 APR 17:26Z
    A reflected HTML injection vulnerability on Salicru SLC-20-cube3(5) devices running firmware version cs121-SNMP v4.54.82.130611 allows remote attackers to…
    cvelistv5