CVE-2021-21803: XSS
First published: Fri Jul 16 2021(Updated: )
This vulnerability is present in device_graph_page.php script, which is a part of the Advantech R-SeeNet web applications. A specially crafted URL by an attacker and visited by a victim can lead to arbitrary JavaScript code execution.
Credit: talos-cna@cisco.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Advantech R-SeeNet | =2.4.12 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2021-21803?
CVE-2021-21803 is a vulnerability present in the device_graph_page.php script of the Advantech R-SeeNet web applications.
What can an attacker do with CVE-2021-21803?
An attacker can execute arbitrary JavaScript code by crafting a specially crafted URL and making the victim visit it.
Which software versions are affected by CVE-2021-21803?
Advantech R-SeeNet version 2.4.12 is affected by CVE-2021-21803.
What is the severity of CVE-2021-21803?
CVE-2021-21803 has a severity rating of critical with a CVSS score of 6.1.
Where can I find more information about CVE-2021-21803?
You can find more information about CVE-2021-21803 at the following URL: https://talosintelligence.com/vulnerability_reports/TALOS-2021-1272
- collector/nvd-index
- agent/weakness
- agent/references
- agent/author
- agent/severity
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/advantech
- canonical/advantech r-seenet
- version/advantech r-seenet/2.4.12