Skip to content
OpenAdvisories

Vendor

StoneFly

5 known vulnerabilities.

Products

Storage Concentrator 5 Storage Concentrator Virtual Machine 5
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2026-50040

    Cross-site Scripting in StoneFly Storage Concentrator

    Storage Concentrator (SC & SCVM) is vulnerable to reflected cross-site scripting due to unsanitized content being echoed back in 404 error pages. An attacker can craft a malicious URL that, when visited by an authenticated user, causes arbitrary script conten…

    StoneFly Storage Concentrator Virtual Machine Storage Concentrator