Security Advisory

CVE-2022-24957

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-03-29 01:11:38
Last updated 2024-08-03 04:29:01
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

DHC Vision eQMS through 5.4.8.322 has Persistent XSS due to insufficient encoding of untrusted input/output. To exploit the vulnerability, the attacker has to create or edit a new information object and use the XSS payload as the name. Any user that opens the object's version or history tab will be attacked.