CVE-2021-4046mediumCWE-79

CVE-2021-4046: medium-severity vulnerability in TCMAN GIM

TCMAN GIM Cross-Site Scripting (XSS)

Published · Updated

Follow this CVE+ Monitor GIM

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.4epss 0.4%
The m_txtNom y m_txtCognoms parameters in TCMAN GIM v8.01 allow an attacker to perform persistent XSS attacks. This vulnerability could be used to carry out a number of browser-based attacks including browser hijacking or theft of sensitive data.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Affected products
TCMAN · GIM
Related CVEs — TCMAN GIM

In the same product, most dangerous first.

CVE-2021-40851HIGHTCMAN GIM SQL injection vulnerabilityEPSS 1.4%CVE-2021-40850CRITICALTCMAN GIM SQL injection vulnerabilityEPSS 1.0%CVE-2021-40853HIGHTCMAN GIM missing authorization vulnerabilityEPSS 0.9%CVE-2022-36276CRITICALSQL injection vulnerability in TCMAN GIMEPSS 0.8%CVE-2025-40625CRITICALMultiple vulnerabilities in TCMAN's GIMEPSS 0.8%CVE-2021-40852MEDIUMTCMAN GIM open redirect vulnerabilityEPSS 0.7%