Stored Cross-Site Scripting Vulnerabilities in NetGain Enterprise Manager
CVE-2018-10586

4.8MEDIUM

Key Information:

Vendor

Netgain-systems

Status
Enterprise Manager
Vendor
CVE Published:
1 November 2018

What is CVE-2018-10586?

NetGain Enterprise Manager is susceptible to multiple stored Cross-Site Scripting (XSS) vulnerabilities in versions prior to 10.1.12. These vulnerabilities allow attackers to inject malicious scripts into web pages viewed by other users, potentially compromising user data and system integrity. Organizations utilizing affected versions should apply necessary updates and implement robust security measures to mitigate the risks associated with these vulnerabilities.

References

https://www.wizlynxgroup.com/security-research-advisories...
x_refsource_MISC

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.