CVE-2020-28047

AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting)

published November 5, 2020

CVSS
—
EPSS
1%
Percentile
57.6
In the wild
Unconfirmed
What it is

AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting). If the recommended security configuration parameter "unique_error_numbers" is not set, remote attackers can inject arbitrary web script or HTML via 'action, cargo, panel' parameters that can lead to data leakage.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00845 · 57.6th percentile
Published
2020-11-05T14:57Z
EPSS history
Timeline
  • 05 NOV 14:57Z
    AudimexEE before 14.1.1 is vulnerable to Reflected XSS (Cross-Site-Scripting)
    cvelistv5