CVE-2021-46387

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS)

published March 1, 2022

CVSS
—
EPSS
21%
Percentile
97.6
In the wild
Unconfirmed
What it is

ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS). Insecure URI handling leads to bypass security restriction to achieve Cross Site Scripting, which allows an attacker able to execute arbitrary JavaScript codes to perform multiple attacks such as clipboard hijacking and session hijacking.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.20955 · 97.6th percentile
Published
2022-03-01T14:04Z
EPSS history
Timeline
  • 01 MAR 14:04Z
    ZyXEL ZyWALL 2 Plus Internet Security Appliance is affected by Cross Site Scripting (XSS)
    cvelistv5