CVE-2020-17457

Medium

Description

Fujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker can store an XSS payload in the PSCU_FILE_INIT field of a Save Configuration XML document. The payload is triggered in the HTTP error response pages.

SeverityMedium
CVSS5.4
Exploit probability—
ProductFujitsu Serverview Remote Management
PublishedMar 17, 2021
First seenMar 17, 2021

How to fix

Update
  • fujitsu serverview_remote_management9.62f or later

Affected products

ProductAffected versionsFixed in
fujitsu serverview_remote_managementv < 9.62f9.62f

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2020-17457 · Fujitsu Serverview Remote Management · Dark Radar