CVE-2021-32005

· MEDIUMModified

← All CVEs

CVSS v3.1

6.5

EPSS

0.59%

Published

Mar 10, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Weaknesses (CWE)

CWE-79CWE-79

Affected Products (18)

secomea · sitemanager_1129_firmware (up to 9.6.621421014)vulnerable

secomea · sitemanager_1129

secomea · sitemanager_1139_firmware (up to 9.6.621421014)vulnerable

secomea · sitemanager_1139

secomea · sitemanager_1149_firmware (up to 9.6.621421014)vulnerable

secomea · sitemanager_1149

secomea · sitemanager_3329_firmware (up to 9.6.621421014)vulnerable

secomea · sitemanager_3329

secomea · sitemanager_3339_firmware (up to 9.6.621421014)vulnerable

secomea · sitemanager_3339

secomea · sitemanager_3349_firmware (up to 9.6.621421014)vulnerable

secomea · sitemanager_3349

secomea · sitemanager_3529_firmware (up to 9.6.621421014)vulnerable

secomea · sitemanager_3529

secomea · sitemanager_3539_firmware (up to 9.6.621421014)vulnerable

secomea · sitemanager_3539

secomea · sitemanager_3549_firmware (up to 9.6.621421014)vulnerable

secomea · sitemanager_3549

References (2)

https://www.secomea.com/support/cybersecurity-advisory/#5017

Not ApplicableVendor Advisory

https://www.secomea.com/support/cybersecurity-advisory/#5017

Not ApplicableVendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs