Awaiting Analysis
CVE has been recently published to the CVE List and has been received by the NVD.

Products

TE Informatics

before 6.2

Source

iletisim@usom.gov.tr

CVE-2024-2010 details

Published : Sept. 12, 2024, 9:15 a.m.
Last Modified : Sept. 12, 2024, 12:35 p.m.

Description

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in TE Informatics V5 allows Reflected XSS.This issue affects V5: before 6.2.

CVSS Score

1	2	3	4	5	6	7	8	9	10

Weakness

Weakness	Name	Description
CWE-80	Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)	The product receives input from an upstream component, but it does not neutralize or incorrectly neutralizes special characters such as "<", ">", and "&" that could be interpreted as web-scripting elements when they are sent to a downstream component that processes web pages.

References

URL	Source
https://www.usom.gov.tr/bildirim/tr-24-1456	iletisim@usom.gov.tr

This website uses the NVD API, but is not approved or certified by it.