CVE-2021-23282CWE-79

Stored Cross-site Scripting reported in Intelligent Power Manager v1

Medium · published November 25, 2024

CVSS v3.1
5.2
EPSS
8%
Percentile
94.9
In the wild
Unconfirmed
What it is

Eaton Intelligent Power Manager (IPM) prior to 1.70 is vulnerable to stored Cross site scripting. The

vulnerability exists due to insufficient validation of input from certain resources by the IPM software.

The attacker would need access to the local Subnet and an administrator interaction to compromise

the system

The record
Technical detail
CVSS v3.1
5.2 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.08326 · 94.9th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-11-25T08:36Z
EPSS history
Timeline
  • 25 NOV 08:36Z
    Stored Cross-site Scripting reported in Intelligent Power Manager v1
    cvelistv5