CVE-2021-27887
Medium
Description
Cross-site Scripting (XSS) vulnerability in the main dashboard of Ellipse APM versions allows an authenticated user or integrated application to inject malicious data into the application that can then be executed in a victim’s browser. This issue affects: Hitachi ABB Power Grids Ellipse APM 5.3 version 5.3.0.1 and prior versions; 5.2 version 5.2.0.3 and prior versions; 5.1 version 5.1.0.6 and prior versions.
SeverityMedium
CVSS6.3
Exploit probability—
ProductHitachiabb-powergrids Ellipse Asset Performance Management
PublishedJun 14, 2021
First seenJun 14, 2021
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hitachiabb-powergrids ellipse_asset_performance_management | 5.1.0.0 ≤ v ≤ 5.1.0.6, 5.2.0.0 ≤ v ≤ 5.2.0.3, 5.3.0.0 ≤ v ≤ 5.3.0.1 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.