漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
A vulnerability has been identified in SiPass integrated (All versions < V3.0). Affected server applications are vulnerable to stored Cross-Site Scripting (XSS), allowing an attacker to inject malicious code that can be executed by other users when they visit the affected page. Successful exploitation allows an attacker to impersonate other users within the application and steal their session data. This could enable unauthorized access to accounts and potentially lead to privilege escalation.
漏洞信息
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
漏洞
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
漏洞
Siemens SiPass integrated 跨站脚本漏洞
漏洞信息
Siemens SiPass Integrated是德国西门子(Siemens)公司的一个功能强大且极其灵活的门禁控制系统。 Siemens SiPass integrated V3.0之前版本存在跨站脚本漏洞,该漏洞源于容易受到存储型跨站脚本攻击,可能导致攻击者冒充其他用户并窃取其会话数据。
漏洞信息
N/A
漏洞
N/A