CVE-2018-18985

Description

Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.96.28.4 a cross-site scripting vulnerability has been identified that may allow a remote attacker to inject code to some web pages affecting confidentiality.

Risk Information

Base Score

5.4

MODERATE

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS Score

Exploitation Probability

0.206

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-16744,CVE-2017-16748,CVE-2018-18985 are affected in Tridium Niagara Framework 4.4	Windows
Vulnerabilities CVE-2018-18985 are affected in Tridium Niagara Enterprise Security *	Windows
Vulnerabilities CVE-2018-18985 are affected in Tridium Niagara Enterprise Security 2.3u1	Windows
Vulnerabilities CVE-2018-18985 are affected in Tridium Niagara Framework 4.4u2	Windows
Vulnerabilities CVE-2018-18985,CVE-2020-14483 are affected in Tridium Niagara Framework 4.6.96.28	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234