CVE-2021-3442

EPSS 0.4%CWE-20

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 0.4%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

22 ago 2022Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A flaw was found in the Red Hat OpenShift API Management product. User input is not validated allowing an authenticated user to inject scripts into some text boxes leading to a XSS attack. The highest threat from this vulnerability is to data confidentiality.

Productos afectados

n/a · Red Hat OpenShift API Management.

Referencias

https://access.redhat.com/security/cve/CVE-2021-3442 https://bugzilla.redhat.com/show_bug.cgi?id=1930083