Vulnerability Details CVE-2021-31589
A cross-site scripting (XSS) vulnerability has been reported and confirmed for BeyondTrust Secure Remote Access Base Software version 6.0.1 and older, which allows the injection of unauthenticated, specially-crafted web requests without proper sanitization.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.272
EPSS Ranking 96.2%
CVSS Severity
CVSS v3 Score 6.1
CVSS v2 Score 4.3
References
- http://packetstormsecurity.com/files/165408/BeyondTrust-Remote-Support-6.0-Cross-Site-Scripting.html
- https://cxsecurity.com/issue/WLB-2022010013
- https://www.beyondtrust.com/docs/release-notes/index.htm
- http://packetstormsecurity.com/files/165408/BeyondTrust-Remote-Support-6.0-Cross-Site-Scripting.html
- https://cxsecurity.com/issue/WLB-2022010013
- https://www.beyondtrust.com/docs/release-notes/index.htm
Products affected by CVE-2021-31589
-
cpe:2.3:o:beyondtrust:appliance_base_software:*