CoreCVE
Back

MEDIUM

Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names

Published May 13, 2019

Description

Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published May 13, 2019
Updated Aug 5, 2024
Reserved Jun 13, 2018
Link CVE-2018-12297

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2018-12297

Red Hat

No data

ENISA EUVD

Assigner mitre
Published May 13, 2019
Updated Aug 5, 2024
Link EUVD-2018-4271

GitHub

No data