CVE-2022-25784 | SynScan

Vulnerability Database

290,020

Total vulnerabilities in the database

CVE-2022-25784

Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7.

Published: May 4, 2022
Updated: Apr 14, 2023
CVE: CVE-2022-25784
Severity: Low
Exploit:

CVSS v3:

Severity: Low
Score: 4.8
AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

CVSS v2:

Severity: Low
Score: 3.5
AV:N/AC:M/Au:S/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
secomea / sitemanager_1129_firmware	-	9.7.622134021
secomea / sitemanager_1139_firmware	-	9.7.622134021
secomea / sitemanager_1149_firmware	-	9.7.622134021
secomea / sitemanager_3329_firmware	-	9.7.622134021
secomea / sitemanager_3339_firmware	-	9.7.622134021
secomea / sitemanager_3349_firmware	-	9.7.622134021
secomea / sitemanager_3529_firmware	-	9.7.622134021
secomea / sitemanager_3539_firmware	-	9.7.622134021
secomea / sitemanager_3549_firmware	-	9.7.622134021

https://www.secomea.com/support/cybersecurity-advisory/