Unscored CVE-2019-5988 EUVD-2019-15556GHSA-rgf3-4335-wpx5

Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers t…

Published Jan 6, 2020 · Updated Aug 4, 2024 · Assigned by jpcert

Vendor: ANGLERSNET Co,.Ltd. Product: Access analysis CGI An-Analyzer

Description

Stored cross-site scripting vulnerability in Access analysis CGI An-Analyzer released in 2019 June 24 and earlier allows remote attackers to inject arbitrary web script or HTML via the Management Page.

Affected products

Vendor	Product	Affected	Fixed
ANGLERSNET Co,.Ltd.	Access analysis CGI An-Analyzer	released in 2019 June 24 and earlier	—

References

https://www.anglers-net.com/anlog/update/index.html
https://jvn.jp/en/jp/JVN37230341/index.html