CVE-2021-3834: Integria IMS vulnerable to Cross Site Scripting (XSS)

Published Oct 7, 2021

Updated

Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack (XSS).

Affected Software

1 affected component

Artica Integria IMS=5.0.92

Event History

Oct 7, 2021

CVE Published

via MITRE·03:14 PM

Data Sourced

via MITRE·03:14 PM

RemedyDescriptionSeverityWeakness

Data Sourced

via NVD·04:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this Integria IMS vulnerability?

The vulnerability ID for this Integria IMS vulnerability is CVE-2021-3834.

What is the severity of CVE-2021-3834?

The severity of CVE-2021-3834 is medium with a CVSS score of 6.1.

What is the affected software version?

The affected software version is Integria IMS 5.0.92.

What is the impact of CVE-2021-3834?

The impact of CVE-2021-3834 is that it allows an attacker to perform a cross-site scripting (XSS) attack.

Are there any references available for CVE-2021-3834?

Yes, you can find references for CVE-2021-3834 at the following URLs: [reference1](https://integriaims.com/en/services/updates/), [reference2](https://www.incibe-cert.es/en/early-warning/security-advisories/integria-ims-vulnerable-cross-site-scripting-xss)