CVSS: 5.4EPSS: 0%CPEs: 18EXPL: 0CVE-2020-29027 – Reflected Cross Site Scripting
https://notcve.org/view.php?id=CVE-2020-29027
Cross-site Scripting (XSS) vulnerability in GUI of Secomea SiteManager could allow an attacker to cause an XSS Attack. This issue affects: Secomea SiteManager all versions prior to 9.3. Una vulnerabilidad de tipo Cross-site Scripting (XSS) en la GUI de Secomea SiteManager, podría permitir a un atacante causar un ataque de tipo XSS. Este problema afecta: Secomea SiteManager todas las versiones anteriores a 9.3 • https://www.secomea.com/support/cybersecurity-advisory/#3042 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2020-29025 – DOM-based Javascript injection
https://notcve.org/view.php?id=CVE-2020-29025
A vulnerability in SiteManager-Embedded (SM-E) Web server which may allow attacker to construct a URL that if visited by another application user, will cause JavaScript code supplied by the attacker to execute within the user's browser in the context of that user's session with the application. This issue affects all versions and variants of SM-E prior to version 9.3 Una vulnerabilidad en el servidor Web de SiteManager-Embedded (SM-E), que puede permitir al atacante construir una URL que, si es visitada por otro usuario de la aplicación, causará que el código JavaScript suministrado por el atacante se ejecute dentro del navegador del usuario en el contexto de la sesión de ese usuario con la aplicación. Este problema afecta a todas las versiones y variantes de SM-E anteriores a versión 9.3 • https://www.secomea.com/support/cybersecurity-advisory/#3042 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •