Reflected Self XSS Vulnerability in Nokia IMPACT IoT Platform
CVE-2019-17405

6.1MEDIUM

Key Information:

Vendor: Nokia
Status: Impact
Vendor: CVE Published:; 25 November 2019

What is CVE-2019-17405?

The Nokia IMPACT IoT Platform versions prior to 18A are susceptible to a reflected self cross-site scripting (XSS) vulnerability. This flaw allows an attacker to inject malicious scripts into web pages viewed by users. If exploited, it can lead to the execution of arbitrary JavaScript in the context of the victim's browser, potentially compromising user data and session information. Users and administrators should implement security measures to mitigate this vulnerability and upgrade to the latest version.