Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Automatedlogic Subscribe
Filtered by product Webctrl
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-31682 1 Automatedlogic 1 Webctrl 2021-11-28 4.3 MEDIUM 6.1 MEDIUM
The login portal for the Automated Logic WebCTRL/WebCTRL OEM web application contains a vulnerability that allows for reflected XSS attacks due to the operatorlocale GET parameter not being sanitized. This issue impacts versions 6.5 and below. This issue works by passing in a basic XSS payload to a vulnerable GET parameter that is reflected in the output without sanitization.