CVE-2021-27465
Assigner: icscert
Published: 2021-05-20T11:05:47
State: PUBLISHED
affected: product: Emerson Rosemount X-STREAM Gas Analyzer
vendor: n/a
versions: status: affected
version: X-STREAM enhanced XEGP – all revisions, X-STREAM enhanced XEGK – all revisions, X-STREAM enhanced XEFD – all revisions, X-STREAM enhanced XEXF – all revisions
descriptions: value: A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected applications do not validate webpage input, which could allow an attacker to inject arbitrary HTML code into a webpage. This would allow an attacker to modify the page and display incorrect or undesirable data.
problemTypes: descriptions: cweId: CWE-79
description: IMPROPER NEUTRALIZATION OF INPUT DURING WEB PAGE GENERATION ('CROSS-SITE SCRIPTING') CWE-79
type: CWE