Medium · 4.1 CVE-2022-40204 EUVD-2022-43504GHSA-26cq-q9jv-w39f

A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in u…

Published Nov 30, 2022 · Updated Apr 16, 2025 · Assigned by icscert

Vendor: Digital Alert Systems Product: DASDEC

Description

A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.

Affected products

Vendor	Product	Affected	Fixed
Digital Alert Systems	DASDEC	all	—

Advisories 1

ICSA-22-326-02 Digital Alert Systems DASDEC CISA ICS & IT advisories · Nov 22, 2022

References

https://www.digitalalertsystems.com/security-advisory vendor-advisory