CVE-2018-15703

Advantech WebAccess 8.3.2 and below is vulnerable to multiple reflected cross site scripting vulnerabilities. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim to supply malicious HTML or JavaScript code to WebAccess, which is then reflected back to the victim and executed by the web browser.

Score

CVSS 3.0 6.1 Medium

Status

Modified - vulnreport@tenable.com

Published

2018-10-22

Last modified

2024-09-16

Weaknesses

CWE-79

Affected products

• Advantech Webaccess (Advantech)
• Webaccess (Advantech)

References

• https://www.tenable.com/security/research/tra-2018-33