Description
VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output used as a public-facing webpage.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| VISAM | VBASE Pro-RT/ Server-RT (Web Remote) | version 11.6.0.6 | — |
Advisories 1
- ICSA-21-308-01 VISAM VBASE Editor CISA ICS & IT advisories · Nov 4, 2021