CVE-2018-18985: XSS
Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.96.28.4 a cross-site scripting vulnerability has been identified that may allow a remote attacker to inject code to some web pages affecting confidentiality.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-18985?
CVE-2018-18985 has not been explicitly assigned a public severity rating, but it represents a cross-site scripting vulnerability that can pose significant security risks.
How do I fix CVE-2018-18985?
To fix CVE-2018-18985, upgrade Tridium Niagara to versions 4.4.93.40.2 or later, 4.6.96.28.4 or later, 3.8.401.1 or later, or 2.3.118.6 or later.
Which versions are affected by CVE-2018-18985?
CVE-2018-18985 affects Tridium Niagara versions before 4.4.93.40.2, 4.6 before 4.6.96.28.4, Niagara AX before 3.8.401.1, and Enterprise Security versions before 2.3.118.6.
What type of vulnerability is CVE-2018-18985?
CVE-2018-18985 is identified as a cross-site scripting vulnerability that may allow attackers to execute scripts in the context of the user's session.
What systems need to be updated for CVE-2018-18985?
Systems using Tridium Niagara, Niagara AX, and Niagara Enterprise Security need to be updated to mitigate CVE-2018-18985.