CVE-2021-42535

VISAM VBASE version 11.6.0.6 does not neutralize or incorrectly neutralizes user-controllable input before the data is placed in output used as a public-facing webpage.

Score

CVSS 3.1 6.1 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2022-07-27

Last modified

2025-04-17

Weaknesses

CWE-79

Affected products

• Vbase Pro-rt Server-rt Web Remote (Visam)
• Vbase Web-remote (Visam)

References

• https://www.cisa.gov/uscert/ics/advisories/icsa-21-308-01