Security Advisory

CVE-2022-0734

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-05-24 02:10:12

Last updated 2024-08-02 23:40:03

Assigner Zyxel

CVSS score 5.8

State PUBLISHED

Description

A cross-site scripting vulnerability was identified in the CGI program of Zyxel USG/ZyWALL series firmware versions 4.35 through 4.70, USG FLEX series firmware versions 4.50 through 5.20, ATP series firmware versions 4.35 through 5.20, and VPN series firmware versions 4.35 through 5.20, that could allow an attacker to obtain some information stored in the user's browser, such as cookies or session tokens, via a malicious script.

← Browse all CVEs View on cve.org ↗