CVE-2022-29034CWE-79

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1)

Medium · published June 14, 2022

CVSS v3.1

6.1

EPSS

29%

Percentile

98.1

In the wild

Unconfirmed

What it is

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). An error message pop up window in the web interface of the affected application does not prevent injection of JavaScript code.

This could allow attackers to perform reflected cross-site scripting (XSS) attacks.

The record

Technical detail

CVSS v3.1: 6.1 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N/E:P/RL:O/RC:C
CVSS v4.0: Not supplied
EPSS: 0.28732 · 98.1th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2022-06-14T09:21Z

EPSS history

Timeline

14 JUN 09:21Z
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1)
cvelistv5