CVE-2021-30650 in Layer7 API Management OAuth Toolkitالمعلومات

الملخص

بحسب MITRE • 18/02/2022

A reflected cross-site scripting (XSS) vulnerability in the Symantec Layer7 API Management OAuth Toolkit (OTK) allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting malicious code into the OTK web UI client application.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

حجز

13/04/2021

إفشاء

18/02/2022

الاعتدال

تمت الموافقة

إدخال

VDB-193350

EPSS

0.00722

KEV

لا

النشاطات

منخفض جدًا

المصادر

Want to know what is going to be exploited?

We predict KEV entries!