Summary
Successful exploitation of this vulnerability may allow an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim 's browser.
Vulnerabilities 1
-
Medium 6.3
Stored XSS vulnerability in Ellipse APM
Cross-site Scripting (XSS) vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hi…
Revision history
-
#1
ICSA-21-110-01 Hitachi ABB Power Grids Ellipse APM
References
-
ICS Advisory ICSA-21-110-01 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-110-01
-
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-21-110-01
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B