Vulnerability Details CVE-2018-18991
Reflected cross-site scripting (non-persistent) in SCADA WebServer (Versions prior to 2.03.0001) could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 40.3%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
Products affected by CVE-2018-18991
-
cpe:2.3:a:spidercontrol:scada_webserver:-
-
cpe:2.3:a:spidercontrol:scada_webserver:2.02.0007