ICSA-22-055-02

Mitsubishi Electric EcoWebServerIII

Advisory ansehen veröffentlicht 2022-02-24

Successful exploitation of these vulnerabilities could allow information to be disclosed, tampered with, or result in a denial-of-service condition.

beschreibt (3)

Zugehörige CVEs.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2016-10735US	medium6.1	4.04% (91st)	Exploit	2019-01-09
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
CVE-2018-14042US	medium6.1	4.01% (91st)	Exploit	2018-07-13
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14040US	medium6.1	4.13% (91st)	Exploit	2018-07-13
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

ICS Advisory ICSA-22-055-02 JSONself
ICS Advisory ICSA-22-055-02 Web Versionself
Recommended Practicesexternal
Recommended Practicesexternal
Recommended Practicesexternal

Behebungen (24)

MitigationMES3-255C-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-CN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-EN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-EN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-DM-EN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-EN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-EN
MES3-255C-CN: Update to v3.3.1 or later
MitigationMES3-255C-EN
MES3-255C-CN: Update to v3.3.1 or later
BehobenMES3-255C-CN
MES3-255C-EN: Update to v3.3.1 or later
BehobenMES3-255C-CN
MES3-255C-EN: Update to v3.3.1 or later
BehobenMES3-255C-CN
MES3-255C-EN: Update to v3.3.1 or later
BehobenMES3-255C-DM-CN
MES3-255C-EN: Update to v3.3.1 or later
BehobenMES3-255C-DM-CN
MES3-255C-EN: Update to v3.3.1 or later
BehobenMES3-255C-DM-CN
MES3-255C-EN: Update to v3.3.1 or later
BehobenMES3-255C-DM-EN
MES3-255C-EN: Update to v3.3.1 or later
BehobenMES3-255C-DM-EN
MES3-255C-EN: Update to v3.3.1 or later
BehobenMES3-255C-DM-EN
MES3-255C-EN: Update to v3.3.1 or later
BehobenMES3-255C-EN
MES3-255C-EN: Update to v3.3.1 or later
BehobenMES3-255C-EN
MES3-255C-EN: Update to v3.3.1 or later
BehobenMES3-255C-EN
MES3-255C-EN: Update to v3.3.1 or later

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan