Skip to content
OpenAdvisories
High · 8.0 CVE-2021-22291 EUVD-2021-9437GHSA-xmxj-3326-2879

EIBPORT Reflected XSS

Published Oct 7, 2025 · Updated Oct 7, 2025 · Assigned by ABB

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2.

Affected products

VendorProductAffectedFixed
ABB EIBPORT V3 KNX < 3.9.2 3.9.2
ABB EIBPORT V3 KNX GSM < 3.9.2 3.9.2

Advisories 2

References