CVE-2021-46355

OCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS)

published February 11, 2022

CVSS
—
EPSS
1%
Percentile
55.5
In the wild
Unconfirmed
What it is

OCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS). To exploit the vulnerability, the attacker needs to manipulate the name of some device on your computer, such as a printer, replacing the device name with some malicious code that allows the execution of Stored Cross-site Scripting (XSS).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00781 · 55.5th percentile
Published
2022-02-11T12:39Z
EPSS history
Timeline
  • 11 FEB 12:39Z
    OCS Inventory 2.9.1 is affected by Cross Site Scripting (XSS)
    cvelistv5