CVE-2021-27416mediumCWE-79

CVE-2021-27416: medium-severity vulnerability in Hitachi ABB Power Grids Ellipse Enterprise…

Cross-site scripting in Hitachi ABB Power Grids Ellipse EAM

Published · Updated

Follow this CVE+ Monitor Ellipse Enterprise Asset Management

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.5epss 0.6%
An attacker could exploit this vulnerability in Hitachi ABB Power Grids Ellipse Enterprise Asset Management (EAM) versions prior to and including 9.0.25 by tricking a user to click on a link containing malicious code that would then be run by the web browser. This can result in the compromise of confidential information, or even the takeover of the user’s session.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L
Affected products
Hitachi ABB Power Grids · Ellipse Enterprise Asset Management (EAM)
Related CVEs — Hitachi ABB Power Grids Ellipse Enterprise…

In the same product, most dangerous first.

CVE-2021-27414MEDIUMUser interface misrepresentation of critical information in Hitachi ABB Power Grids Ellipse EAMEPSS 0.6%