CVE-2020-6978 - In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries

HIGH

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries

Published Mar 24, 2020

7.2

HIGH

CVSS 3.1

EPSS 0.78%

In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Honeywell WIN-PAK 4.7.2, Web and prior versions

n/a

Version	Status	Constraints
Honeywell WIN-PAK 4.7.2, Web and prior versions	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-477

https://www.us-cert.gov/ics/advisories/icsa-20-056-05
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://www.us-cert.gov/ics/advisories/icsa-20-056-05		x_refsource_MISCThird Party AdvisoryUS Government Resource

No recorded changes yet.

Sources

Status PUBLISHED

Assigner icscert

Published Mar 24, 2020

Updated Aug 4, 2024

Reserved Jan 14, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a