CVE-2021-32005: SiteManager Log View XSS Issue
Published Mar 7, 2022
·Updated
Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions.
Affected Software
18 affected components
Secomea Sitemanager 1129 Firmware<9.6.621421014
Secomea Sitemanager 1129
Secomea Sitemanager 1139 Firmware<9.6.621421014
Secomea Sitemanager 1139
Secomea Sitemanager 1149 Firmware<9.6.621421014
Secomea Sitemanager 1149
Secomea Sitemanager 3329 Firmware<9.6.621421014
Secomea Sitemanager 3329
Secomea Sitemanager 3339 Firmware<9.6.621421014
Secomea Sitemanager 3339
Secomea Sitemanager 3349 Firmware<9.6.621421014
Secomea Sitemanager 3349
Secomea Sitemanager 3529 Firmware<9.6.621421014
Secomea Sitemanager 3529
Secomea Sitemanager 3539 Firmware<9.6.621421014
Secomea Sitemanager 3539
Secomea Sitemanager 3549 Firmware<9.6.621421014
Secomea Sitemanager 3549
Event History
Mar 7, 2022
CVE Published
via MITRE·03:21 PM
Data Sourced
via MITRE·03:21 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-32005?
CVE-2021-32005 is a Cross-site Scripting (XSS) vulnerability in the log view of Secomea SiteManager.
2
How does CVE-2021-32005 affect Secomea SiteManager?
CVE-2021-32005 allows a logged in user to store JavaScript for later execution in the log view of Secomea SiteManager.
3
What is the severity of CVE-2021-32005?
The severity of CVE-2021-32005 is medium with a CVSS score of 5.4.
4
Which versions of Secomea SiteManager are affected by CVE-2021-32005?
Secomea SiteManager Version 9.6.621421014 and all prior versions are affected by CVE-2021-32005.
5
How can I fix CVE-2021-32005?
To fix CVE-2021-32005, Secomea SiteManager users should update to a version beyond 9.6.621421014.