CVE-2013-2299

Cross-site scripting (XSS) vulnerability in Advantech WebAccess (formerly BroadWin WebAccess) before 7.1 2013.05.30 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Score

CVSS 2.0 3.5 Low

Status

Modified - ics-cert@hq.dhs.gov

Published

2013-08-22

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Advantech Webaccess (Advantech)

References

• http://ics-cert.us-cert.gov/advisories/ICSA-13-225-01