← CVE Intelligence

CVE-2024-3776

Netvision airPASS - Reflected XSS PUBLISHED

Description (CNA)

The parameter used in the login page of Netvision airPASS is not properly filtered for user input. An unauthenticated remote attacker can insert JavaScript code to the parameter for Reflected Cross-site scripting attacks.

Affected (CNA)

Vendor / productVersions
Netvision / airPASS affected earlier before v2.9.0.20231006

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.