Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Reflected Cross Site Scripting (XSS) vulnerability in Bosch VRM / BVMS
Vulnerability Description
An error in a page handler of the VRM may lead to a reflected cross site scripting (XSS) in the web-based interface. To exploit this vulnerability an attack must be able to modify the HTTP header that is sent. This issue also affects installations of the DIVAR IP and BVMS with VRM installed.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Vulnerability Title
Bosch 多款产品跨站脚本漏洞
Vulnerability Description
Bosch Access Professional Edition等都是德国博世（Bosch）公司的产品。Bosch Access Professional Edition是一套企业访问控制和安防管理解决方案。BOSCH VRM等都是德国博世（BOSCH）公司的产品。BOSCH VRM是一个应用软件。Bosch BVMS是一个应用系统。Bosch Access Easy Controller（Bosch Aec）是一种直观、用户友好的基于 Web 的访问控制系统。Bosch Divar Ip是一种多合一录
CVSS Information
N/A
Vulnerability Type
N/A