CVE-2020-6876

A ZTE product is impacted by an XSS vulnerability

published October 26, 2020

CVSS
—
EPSS
1%
Percentile
49.1
In the wild
Unconfirmed
What it is

A ZTE product is impacted by an XSS vulnerability. The vulnerability is caused by the lack of correct verification of client data in the WEB module. By inserting malicious scripts into the web module, a remote attacker could trigger an XSS attack when the user browses the web page. Then the attacker could use the vulnerability to steal user cookies or destroy the page structure. This affects: eVDC ZXCLOUD-iROSV6.03.04

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00622 · 49.1th percentile
Published
2020-10-26T15:35Z
EPSS history
Timeline
  • 26 OCT 15:35Z
    A ZTE product is impacted by an XSS vulnerability
    cvelistv5