CVE-2021-21738

ZTE's big video business platform has two reflective cross-site scripting (XSS) vulnerabilities

published August 5, 2021

CVSS
—
EPSS
1%
Percentile
47.0
In the wild
Unconfirmed
What it is

ZTE's big video business platform has two reflective cross-site scripting (XSS) vulnerabilities. Due to insufficient input verification, the attacker could implement XSS attacks by tampering with the parameters, to affect the operations of valid users. This affects: <ZXIPTV><ZXIPTV-EAS_PV5.06.04.09>

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00581 · 47.0th percentile
Published
2021-08-05T19:49Z
EPSS history
Timeline
  • 05 AUG 19:49Z
    ZTE's big video business platform has two reflective cross-site scripting (XSS) vulnerabilities
    cvelistv5