CVE-2020-13176

Katalog CVE

CVSS 6.1 · Medium EPSS 0,83%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada teradici cloud access connector, teradici cloud access connector legacy. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

The Management Interface of the Teradici Cloud Access Connector and Cloud Access Connector Legacy for releases prior to April 24, 2020 (v16 and earlier for the Cloud Access Connector) contains a stored cross-site scripting (XSS) vulnerability which allows a remote unauthenticated attacker to poison log files with malicious JavaScript via the login page which is executed when an administrator views the logs within the application.

Rincian

Terbit di NVD

11 Agustus 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

EPSS (30 hari)

0,83% peluang dieksploitasi; lebih tinggi dari 56,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://advisory.teradici.com/security-advisories/59/ advisory vendor