CVE-2024-7466: PMWeb Web Application Firewall cross site scripting

Published Aug 5, 2024

Updated

A vulnerability has been found in PMWeb 7.2.00 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Web Application Firewall. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273559. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

Affected Software

1 affected component

PMWeb PMWeb=7.2.00

Event History

Aug 5, 2024

CVE Published

via MITRE·02:00 AM

Data Sourced

via MITRE·02:00 AM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:16 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-7466?

CVE-2024-7466 is classified as a problematic vulnerability.

How do I fix CVE-2024-7466?

To fix CVE-2024-7466, it is recommended to update PMWeb to a patched version.

What type of vulnerability is CVE-2024-7466?

CVE-2024-7466 is a cross-site scripting (XSS) vulnerability.

Can CVE-2024-7466 be exploited remotely?

Yes, CVE-2024-7466 can be exploited remotely.

Which version of PMWeb is affected by CVE-2024-7466?

CVE-2024-7466 affects PMWeb version 7.2.00.