CVE-2021-30650

A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a remote attacker to craft a malicious…

published February 18, 2022

CVSS
—
EPSS
1%
Percentile
53.5
In the wild
Unconfirmed
What it is

A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious code into the OTK web UI client application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00722 · 53.5th percentile
Published
2022-02-18T17:50Z
EPSS history
Timeline
  • 18 FEB 17:50Z
    A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a remote attacker to craft a malicious…
    cvelistv5