CVE-2024-5420CWE-79

Stored Cross-Site Scripting in SEH Computertechnik utnserver Pro

High · published June 4, 2024

CVSS v4.0
8.3
EPSS
6%
Percentile
92.8
In the wild
Unconfirmed
What it is

Missing input validation in the SEH Computertechnik utnserver Pro, SEH Computertechnik utnserver ProMAX, SEH Computertechnik INU-100 web-interface allows stored Cross-Site Scripting (XSS)..This issue affects utnserver Pro, utnserver ProMAX, INU-100 version 20.1.22 and below.

The record
Technical detail
CVSS v4.0
8.3 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:L/VA:H/SC:N/SI:N/SA:H
EPSS
0.05500 · 92.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-06-04T07:48Z
EPSS history
Timeline
  • 04 JUN 07:48Z
    Stored Cross-Site Scripting in SEH Computertechnik utnserver Pro
    cvelistv5