CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0CVE-2020-16246 – GE Reason S20 Ethernet Switch
https://notcve.org/view.php?id=CVE-2020-16246
20 Oct 2020 — The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow attackers to trick users into following a link or navigating to a page that posts a malicious JavaScript statement to the vulnerable site, causing the malicious JavaScript to be rendered by the site and executed by the victim client. El Reason S20 Ethernet Switch afectado es vulnerable a un ataque de tipo cross-site scripting (XSS), lo que puede permitir a atacantes engañar a los usuarios para que sigan un e... • https://us-cert.cisa.gov/ics/advisories/icsa-20-266-02 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 4EXPL: 0CVE-2020-16242 – GE Reason S20 Ethernet Switch
https://notcve.org/view.php?id=CVE-2020-16242
25 Sep 2020 — The affected Reason S20 Ethernet Switch is vulnerable to cross-site scripting (XSS), which may allow an attacker to trick application users into performing critical application actions that include, but are not limited to, adding and updating accounts. El Reason S20 Ethernet Switch afectado es vulnerable a un ataque de tipo cross-site scripting (XSS), que pueden permitir a un atacante engañar a los usuarios de la aplicación para llevar a cabo acciones críticas de la aplicación que incluyen, pero no los limi... • https://us-cert.cisa.gov/ics/advisories/icsa-20-266-02 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •