CVE-2022-28816CWE-79

Reflected XSS in Carlo Gavazzi UWP 3.0

Medium · published September 28, 2022

CVSS v3.1
6.1
EPSS
0%
Percentile
37.5
In the wild
Unconfirmed
What it is

In Carlo Gavazzi UWP3.0 in multiple versions and CPY Car Park Server in Version 2.8.3 the Sentilo Proxy is prone to reflected XSS which only affects the Sentilo service.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00443 · 37.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-09-28T13:45Z
EPSS history
Timeline
  • 28 SEP 13:45Z
    Reflected XSS in Carlo Gavazzi UWP 3.0
    cvelistv5