CVE-2020-27262 | BDVDB-2026-147123 Detail

Innokas Yhtymä Oy Vital Signs Monitor VC150

Description#

Innokas Yhtymä Oy Vital Signs Monitor VC150 prior to Version 1.7.15 A stored cross-site scripting (XSS) vulnerability exists in the affected products that allow an attacker to inject arbitrary web script or HTML via the filename parameter to multiple update endpoints of the administrative web interface.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References#

https://us-cert.cisa.gov/ics/advisories/icsma-21-007-01

Exploit#

No public exploit known

History#

Version 12021-01-08Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.