CVE-2023-40461 (published 2023-12-04T22:52:13.650Z)










The ACEManager
component of ALEOS 4.16 and earlier allows an



authenticated user
with Administrator privileges to access a file



upload field which
does not fully validate the file name, creating a



Stored Cross-Site
Scripting condition.








Affected products: Vendor: SierraWireless
Product: ALEOS
Versions: 4.10, 0