CVE-2022-29152 - The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page

MEDIUM

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page

Published Apr 28, 2022

6.1

MEDIUM

CVSS 3.1

EPSS 0.57%

The Ericom PowerTerm WebConnect 6.0 login portal can unsafely write an XSS payload from the AppPortal cookie into the page.

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33561		Advisory
https://github.com/the-emmons/CVE-Disclosures/blob/main/CVE-2022-29152/CVE-2022-29152.md		x_refsource_MISCThird Party Advisory
https://www.ericom.com/powerterm/webconnect-hostview/		x_refsource_MISCProductVendor Advisory