Wiesemann & Theis: Multiple products from Wiesemann & Theis support deprecated jQuery version
view advisory published 2025-05-13
Multiple W&T devices are shipped with a jQuery version with a known XSS vulnerability.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-6708US | medium6.1 | Exploit | ||
jQuery before 1.9.0 is vulnerable to Cross-site Scripting (XSS) attacks. The jQuery(strInput) function does not differentiate selectors from HTML in a reliable fashion. In vulnerab… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- Mitigation
Access to the WBM should be limited to trustworthy networks or peers.
- Fixed
Update the affected devices to the versions listed below.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan