CVE-2024-42020: XSS
Published Sep 7, 2024
·Updated
A Cross-site-scripting (XSS) vulnerability exists in the Reporter Widgets that allows HTML injection.
Affected Software
1 affected component
VEEAM ONE>=12<=12.1.0.3208
Event History
Sep 7, 2024
CVE Published
via MITRE·04:11 PM
Data Sourced
via MITRE·04:11 PM
DescriptionSeverity
Data Sourced
via NVD·05:15 PM
DescriptionSeverity
Frequently Asked Questions
1
What is the severity of CVE-2024-42020?
CVE-2024-42020 is classified as a medium severity vulnerability due to its potential for HTML injection leading to Cross-site scripting.
2
How do I fix CVE-2024-42020?
To fix CVE-2024-42020, update Veeam ONE to a version greater than 12.1.0.3208 where the vulnerability has been addressed.
3
What is the impact of CVE-2024-42020?
The impact of CVE-2024-42020 includes the possibility for attackers to inject arbitrary HTML code, potentially compromising user data and session integrity.
4
Who is affected by CVE-2024-42020?
CVE-2024-42020 affects users of Veeam ONE versions from 12.0.0.0 to 12.1.0.3208.
5
Is CVE-2024-42020 a widespread vulnerability?
CVE-2024-42020 is significant but limited to specific versions of Veeam ONE, thus its widespread impact is constrained to affected users.