A reflected cross-site scripting vulnerability in MONITORAPP Application Insight Web Application Firewall (AIWAF) <= 4.1.6 and <=5.0 was identified on the subpage `/process_management/process_status.xhr.php`. This vulnerability allows an attacker to inject malicious scripts that execute in the context of the victim's session.
References
History

Wed, 25 Dec 2024 03:15:00 +0000

Type Values Removed Values Added
Weaknesses CWE-79
Metrics cvssV3_1

{'score': 6.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 20 Dec 2024 22:00:00 +0000

Type Values Removed Values Added
Description A reflected cross-site scripting vulnerability in MONITORAPP Application Insight Web Application Firewall (AIWAF) <= 4.1.6 and <=5.0 was identified on the subpage `/process_management/process_status.xhr.php`. This vulnerability allows an attacker to inject malicious scripts that execute in the context of the victim's session.
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-12-20T00:00:00

Updated: 2024-12-25T02:29:58.732Z

Reserved: 2021-09-13T00:00:00

Link: CVE-2021-40959

cve-icon Vulnrichment

Updated: 2024-12-25T02:29:51.976Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-12-20T22:15:24.340

Modified: 2024-12-25T03:15:18.610

Link: CVE-2021-40959

cve-icon Redhat

No data.