CVE-2020-15033 - NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack

Back Back to CVE browser

MEDIUM

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack

Published Jul 7, 2020

5.4

MEDIUM

CVSS 3.1

EPSS 0.56%

Description

NeDi 1.9C is vulnerable to cross-site scripting (XSS) attack. The application allows an attacker to execute arbitrary JavaScript code via the snmpget.php ip parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7161
Advisory
https://gist.github.com/p4nk4jv/68ae8b773dbea6d8769295ba96d9f1e3
x_refsource_MISCThird Party Advisory
https://www.nedi.ch/download/
x_refsource_MISCProductVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-7161		Advisory
https://gist.github.com/p4nk4jv/68ae8b773dbea6d8769295ba96d9f1e3		x_refsource_MISCThird Party Advisory
https://www.nedi.ch/download/		x_refsource_MISCProductVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 7, 2020

Updated Aug 4, 2024

Reserved Jun 24, 2020

Link CVE-2020-15033

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-15033

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jul 7, 2020

Updated Aug 4, 2024

Link EUVD-2020-7161

GitHub

No data