CVE-2021-34821

Cross Site Scripting (XSS) vulnerability exists in AAT Novus Management System through 1.51.2

published July 19, 2021

CVSS
—
EPSS
1%
Percentile
56.7
In the wild
Unconfirmed
What it is

Cross Site Scripting (XSS) vulnerability exists in AAT Novus Management System through 1.51.2. The WebUI has wrong HTTP 404 error handling implemented. A remote, unauthenticated attacker may be able to exploit the issue by sending malicious HTTP requests to non-existing URIs. The value of the URL path filename is copied into the HTML document as plain text tags.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00816 · 56.7th percentile
Published
2021-07-19T17:21Z
EPSS history
Timeline
  • 19 JUL 17:21Z
    Cross Site Scripting (XSS) vulnerability exists in AAT Novus Management System through 1.51.2
    cvelistv5