CVE-2022-29876CWE-79

A vulnerability has been identified in SICAM T (All versions < V3.0)

High · published May 10, 2022

CVSS v3.1
7.1
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

A vulnerability has been identified in SICAM T (All versions < V3.0). Affected devices do not properly handle the input of a GET request parameter. The provided argument is directly reflected in the web server response. This could allow an unauthenticated attacker to perform reflected XSS attacks.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00861 · 58.2th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-05-10T09:47Z
EPSS history
Timeline
  • 10 MAY 09:47Z
    A vulnerability has been identified in SICAM T (All versions < V3.0)
    cvelistv5