← CVE Intelligence

CVE-2021-32009

Missing XSS guards on firmware page PUBLISHED

Description (CNA)

Cross-site Scripting (XSS) vulnerability in firmware section of Secomea GateManager allows logged in user to inject javascript in browser session. This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions.

Affected (CNA)

Vendor / productVersions
Secomea / GateManageraffected All through 9.6.621421014

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.