CVE-2023-2876CWE-1004

Session cookie exposure for client side script

Low · published June 13, 2023

CVSS v3.1
3.1
EPSS
0%
Percentile
20.6
In the wild
Unconfirmed
What it is

Sensitive Cookie Without 'HttpOnly' Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (firmware modules) allows Cross-Site Scripting (XSS).This issue affects REX640 PCL1: from 1.0;0 before 1.0.8; REX640 PCL2: from 1.0;0 before 1.1.4; REX640 PCL3: from 1.0;0 before 1.2.1.

The record
Technical detail
CVSS v3.1
3.1 · LOW
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00292 · 20.6th percentile
Weakness
CWE-1004 · Sensitive Cookie Without 'HttpOnly' Flag
Published
2023-06-13T03:52Z
EPSS history
Timeline
  • 13 JUN 03:52Z
    Session cookie exposure for client side script
    cvelistv5