CVE-2024-10208CWE-79

Cross Site Scripting vulnerability in APROL Web Portal

Medium · published March 25, 2025

CVSS v4.0
5.1
EPSS
0%
Percentile
33.8
In the wild
Unconfirmed
What it is

An Improper Neutralization of Input During Web Page Generation vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an authenticated network-based attacker to insert malicious code which is then executed in the context of the user’s browser session.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N
EPSS
0.00406 · 33.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2025-03-25T04:43Z
EPSS history
Timeline
  • 25 MAR 04:43Z
    Cross Site Scripting vulnerability in APROL Web Portal
    cvelistv5