CVE-2020-35262 in DG-HR3400

Riassunto

di MITRE • 07/01/2021

Cross Site Scripting (XSS) vulnerability in Digisol DG-HR3400 can be exploited via the NTP server name in Time and date module and "Keyword" in URL Filter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Divulgazione: 07/01/2021
• Moderazione: accettato
• Voce: VDB-167351
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 6.1 (NVD)
• EPSS: 0.00863
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-35262
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-35262
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-35262/