Description (CNA)
The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site and executed by the victim client.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| General Electric / Reason S20 Ethernet Switch | affected S2020 through 07A06; affected S2024 through 07A06 |
CWE
CWE-79
References
ADP enrichment
No English description supplied.