Security Advisory

CVE-2021-32540

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2021-05-28 08:10:26

Last updated 2024-09-16 22:09:39

Assigner twcert

CVSS score 5.4

State PUBLISHED

Description

Add announcement function in the 101EIP system does not filter special characters, which allows authenticated users to inject JavaScript and perform a stored XSS attack.

← Browse all CVEs View on cve.org ↗