CVE-2021-38157

LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter

published August 6, 2021

CVSS
—
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01119 · 65.9th percentile
Published
2021-08-06T20:58Z
EPSS history
Timeline
  • 06 AUG 20:58Z
    LeoStream Connection Broker 9.x before 9.0.34.3 allows Unauthenticated Reflected XSS via the /index.pl user parameter
    cvelistv5