CVE-2020-29027: Reflected Cross Site Scripting
Published Feb 16, 2021
·Updated
Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3.
Affected Software
18 affected components
Secomea Sitemanager 1129 Firmware<9.2c
Secomea Sitemanager 1129
Secomea Sitemanager 1139 Firmware<9.2c
Secomea Sitemanager 1139
Secomea Sitemanager 1149 Firmware<9.2c
Secomea Sitemanager 1149
Secomea Sitemanager 3329 Firmware<9.2c
Secomea Sitemanager 3329
Secomea Sitemanager 3339 Firmware<9.2c
Secomea Sitemanager 3339
Secomea Sitemanager 3349 Firmware<9.2c
Secomea Sitemanager 3349
Secomea Sitemanager 3529 Firmware<9.2c
Secomea Sitemanager 3529
Secomea Sitemanager 3539 Firmware<9.2c
Secomea Sitemanager 3539
Secomea Sitemanager 3549 Firmware<9.2c
Secomea Sitemanager 3549
Event History
Feb 16, 2021
CVE Published
via MITRE·03:48 PM
Data Sourced
via MITRE·03:48 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-29027?
The severity of CVE-2020-29027 is medium with a CVSS score of 5.4.
2
How does CVE-2020-29027 affect Secomea SiteManager?
CVE-2020-29027 affects all versions of Secomea SiteManager prior to 9.3.
3
How can an attacker exploit CVE-2020-29027?
An attacker can exploit CVE-2020-29027 by causing a Cross-site Scripting (XSS) attack through the GUI of Secomea SiteManager.
4
Is Secomea SiteManager version 9.2c vulnerable to CVE-2020-29027?
Yes, Secomea SiteManager version 9.2c is vulnerable to CVE-2020-29027.
5
How can I fix CVE-2020-29027?
To fix CVE-2020-29027, update Secomea SiteManager to version 9.3 or higher.