Critical ICSA-22-242-03 1 CVE

Hitachi Energy MSM Product

Published Aug 30, 2022 · Updated Aug 30, 2022

Vendor: Hitachi Energy Product: MSM

Summary

Successful exploitation of this vulnerability could disrupt the functionality of the MSM web interface, steal sensitive user credentials, or cause a denial-of-service condition.

Vulnerabilities 1

High —

CVE-2015-6584

DataTable Vulnerable to Cross-Site Scripting

Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php.

datatables.js datatables datatables/datatables Debian npm Packagist

Sep 11, 2015

Revision history

2022-08-30 #1
Publication Date

References

ICS Advisory ICSA-22-242-03 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-242-03
Recommended Practices
https://www.cisa.gov/news-events/ics-advisories/icsa-22-242-03
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B