Kion Computer vulnerable to Reflected XSS through 21.11.2024

CVE-2024-7130

5.5MEDIUM

Key Information

Vendor: Kion Computer
Status: Kion Exchange Programs Software
Vendor: CVE Published:; 21 November 2024

Summary

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Kion Computer KION Exchange Programs Software allows Reflected XSS.This issue affects KION Exchange Programs Software: before 1.21.9092.29966.

Affected Version(s)

KION Exchange Programs Software <= 21.11.2024

CVSS V3.1

Score:

5.5

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Unchanged

Timeline

Vulnerability published.
Nov 21, 2024
Vulnerability Reserved.
Jul 26, 2024

Collectors

NVD DatabaseMitre Database

Credit

Engin AYDOGAN

Sibereum Co.