Skip to content
OpenAdvisories
Unscored CVE-2018-18991 EUVD-2018-10695GHSA-jqm7-8wp8-pqg6

Reflected cross-site scripting (non-persistent) in SCADA WebServer (Versions prior to 2.03.0001) could allow an attacker to send a crafted …

Published Dec 4, 2018 · Updated Aug 5, 2024 · Assigned by icscert

Description

Reflected cross-site scripting (non-persistent) in SCADA WebServer (Versions prior to 2.03.0001) could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser.

Affected products

VendorProductAffectedFixed
— SCADA WebServer Versions prior to 2.03.0001 —

Advisories 1

References