CVE-2021-27416CWE-79

Cross-site scripting in Hitachi ABB Power Grids Ellipse EAM

Medium · published March 11, 2022

CVSS v3.1
5.5
EPSS
1%
Percentile
49.2
In the wild
Unconfirmed
What it is

An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containing malicious code that would then be run by the web browser. This can result in the compromise of confidential information, or even the takeover of the user’s session.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00622 · 49.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-03-11T17:53Z
EPSS history
Timeline
  • 11 MAR 17:53Z
    Cross-site scripting in Hitachi ABB Power Grids Ellipse EAM
    cvelistv5