Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2021-23854

Reflected XSS in page parameter

Description

An error in the handling of a page parameter in Bosch IP cameras may lead to a reflected cross site scripting (XSS) in the web-based interface. This issue only affects versions 7.7x and 7.6x. All other versions are not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bosch CPP Firmware

  • 7.70affected
  • 7.72affected
  • 7.62affected

Bosch CPP Firmware

  • 7.75affected
  • 7.76affected

References