CVE-2024-7787 - Reflected XSS in ITG Computer Technology's vSRM Supplier Relationship Management System

Back Back to CVE browser

MEDIUM

Reflected XSS in ITG Computer Technology's vSRM Supplier Relationship Management System

Published Nov 14, 2024

5.1

MEDIUM

CVSS 4.0

EPSS 0.42%

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ITG Computer Technology vSRM Supplier Relationship Management System allows Reflected XSS, Cross-Site Scripting (XSS).

This issue affects vSRM Supplier Relationship Management System: before 28.08.2024.

Affected products

Vendor ITG Computer Technology Product vSRM Supplier Relationship Management System Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <28.08.2024

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

ITG Computer Technology

vSRM Supplier Relationship Management System

unaffected

Version	Status	Constraints
0	affected	<28.08.2024

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48648
Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1853
government-resource
https://www.usom.gov.tr/bildirim/tr-24-1853
government-resourcebroken-link

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-48648		Advisory
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-24-1853		government-resource
https://www.usom.gov.tr/bildirim/tr-24-1853		government-resourcebroken-link