CVE-2022-37952CWE-79

WorkstationST - Reflected XSS in iHistorian Data Display Tags

Medium · published August 25, 2022

CVSS v3.1
4.7
EPSS
0%
Percentile
32.5
In the wild
Unconfirmed
What it is

A reflected cross-site scripting (XSS) vulnerability exists in the iHistorian Data Display of WorkstationST (<v07.09.15) could allow an attacker to compromise a victim's browser. WorkstationST is only deployed in specific, controlled environments rendering attack complexity significantly higher than if the attack were conducted on the software in isolation. WorkstationST v07.09.15 can be found in ControlST v07.09.07 SP8 and greater.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00395 · 32.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-08-25T17:26Z
EPSS history
Timeline
  • 25 AUG 17:26Z
    WorkstationST - Reflected XSS in iHistorian Data Display Tags
    cvelistv5