Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2021-27416

Cross-site scripting in Hitachi ABB Power Grids Ellipse EAM

Description

An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containing malicious code that would then be run by the web browser. This can result in the compromise of confidential information, or even the takeover of the user’s session.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM)

  • unspecified to ≤ 9.0.25affected

References