CVE-2021-46827

sync oxygen publishing engine, sync oxygen xml author, sync oxygen xml developer +2 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-46827

Katalog CVE

CVSS 6.1 · Medium EPSS 0,47%

Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada sync oxygen publishing engine, sync oxygen xml author +3 lainnya. Skor CVSS 3.1 6.1 (Medium) menurut NVD.

Deskripsi (NVD)

An issue was discovered in Oxygen XML WebHelp before 22.1 build 2021082006 and 23.x before 23.1 build 2021090310. An XSS vulnerability in search terms proposals (in online documentation generated using Oxygen XML WebHelp) allows attackers to execute JavaScript by convincing a user to type specific text in the WebHelp output search field.

Rincian

Terbit di NVD
13 Juli 2022
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
6.1 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
EPSS (30 hari)
0,47% peluang dieksploitasi; lebih tinggi dari 38,6% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
sync oxygen publishing engine Semua versi sebelum 22.1
sync oxygen publishing engine Versi 22.1 2020061014
sync oxygen publishing engine Versi 22.1 2020072823
sync oxygen publishing engine Versi 22.1 2020100801
sync oxygen publishing engine Versi 22.1 2020121711
sync oxygen publishing engine Versi 23.1 2021040717
sync oxygen publishing engine Versi 23.1 2021060401
sync oxygen xml author Semua versi sebelum 22.1
sync oxygen xml author Versi 22.1 2020061102
sync oxygen xml author Versi 22.1 2020072902
sync oxygen xml author Versi 22.1 2020100710
sync oxygen xml author Versi 22.1 2020121713
sync oxygen xml author Versi 23.1 2021030206
sync oxygen xml author Versi 23.1 2021040908
sync oxygen xml author Versi 23.1 2021061407
sync oxygen xml developer Semua versi sebelum 22.1
sync oxygen xml developer Versi 22.1 2020061102
sync oxygen xml developer Versi 22.1 2020072902
sync oxygen xml developer Versi 22.1 2020100710
sync oxygen xml developer Versi 22.1 2020121713
sync oxygen xml developer Versi 23.1 2021030206
sync oxygen xml developer Versi 23.1 2021040908
sync oxygen xml developer Versi 23.1 2021061407
sync oxygen xml editor Semua versi sebelum 22.1
sync oxygen xml editor Versi 22.1 2020061102
sync oxygen xml editor Versi 22.1 2020072902
sync oxygen xml editor Versi 22.1 2020100710
sync oxygen xml editor Versi 22.1 2020121713
sync oxygen xml editor Versi 23.1 2021030206
sync oxygen xml editor Versi 23.1 2021040908
sync oxygen xml editor Versi 23.1 2021061407
sync oxygen xml webhelp Semua versi sebelum 22.1
sync oxygen xml webhelp Versi 22.1 2020061014
sync oxygen xml webhelp Versi 22.1 2020072412
sync oxygen xml webhelp Versi 22.1 2020100208
sync oxygen xml webhelp Versi 22.1 2020121713
sync oxygen xml webhelp Versi 23.1 2021030210
sync oxygen xml webhelp Versi 23.1 2021040711
sync oxygen xml webhelp Versi 23.1 2021060306

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.