Skip to content
CVE PROGRAM SOURCE RECORD5.0 Medium

CVE-2021-32009

Missing XSS guards on firmware page

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Secomea

Description

Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Secomea GateManager

  • All to ≤ 9.6.621421014affected

References