CVE-2022-25784: User controllable HTML element attribute (potential XSS)
Published May 4, 2022
·Updated
Cross-site Scripting (XSS) vulnerability in Web GUI of SiteManager allows logged-in user to inject scripting. This issue affects: Secomea SiteManager all versions prior to 9.7.
Affected Software
18 affected components
Secomea Sitemanager 1129 Firmware<9.7.622134021
Secomea Sitemanager 1129
Secomea Sitemanager 1139 Firmware<9.7.622134021
Secomea Sitemanager 1139
Secomea Sitemanager 1149 Firmware<9.7.622134021
Secomea Sitemanager 1149
Secomea Sitemanager 3329 Firmware<9.7.622134021
Secomea Sitemanager 3329
Secomea Sitemanager 3339 Firmware<9.7.622134021
Secomea Sitemanager 3339
Secomea Sitemanager 3349 Firmware<9.7.622134021
Secomea Sitemanager 3349
Secomea Sitemanager 3529 Firmware<9.7.622134021
Secomea Sitemanager 3529
Secomea Sitemanager 3539 Firmware<9.7.622134021
Secomea Sitemanager 3539
Secomea Sitemanager 3549 Firmware<9.7.622134021
Secomea Sitemanager 3549
Event History
May 4, 2022
CVE Published
via MITRE·01:56 PM
Data Sourced
via MITRE·01:56 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-25784?
CVE-2022-25784 is a Cross-site Scripting (XSS) vulnerability in the Web GUI of SiteManager.
2
Which versions of SiteManager are affected by CVE-2022-25784?
All versions of Secomea SiteManager prior to 9.7.622134021 are affected by CVE-2022-25784.
3
How severe is CVE-2022-25784?
CVE-2022-25784 has a severity rating of 4.8 (critical).
4
What is the Common Weakness Enumeration (CWE) ID for CVE-2022-25784?
The CWE ID for CVE-2022-25784 is 79.
5
How can I fix CVE-2022-25784?
To fix CVE-2022-25784, it is recommended to update Secomea SiteManager to version 9.7.622134021 or later.