Back to feed
EUVD-2014-7161 · Published Nov 19, 2014
Multiple cross-site scripting (XSS) vulnerabilities in Atlas Systems Aeon 3.5 and 3.6 allow remote attackers to inject arbitrary web script or HTML via the (1) Action or (2) Form parameter to aeon.dll.
Technologies
Atlas_Systems Aeon
Weaknesses
CWE-79
CVSS scores
- v2.04.3
AV:N/AC:M/Au:N/C:N/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://packetstormsecurity.com/files/129114/Atlas-Systems-Aeon-3.5-3.6-Cross-Site-Scripting.html
- http://seclists.org/fulldisclosure/2014/Nov/32
- http://tetraph.com/security/xss-vulnerability/cve-2014-7290-atlas-systems-aeon-xss-cross-site-scripting-vulnerability/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/98705
Potentially impacted assets
See if this affects your attack surface
