medium5.4
CVE-2021-33848
Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks.
Impact
Fresenius Kabi Vigilant Software Suite (Mastermed Dashboard) version 2.0.1.3 is vulnerable to reflected cross-site scripting attacks. An attacker could inject JavaScript in a GET parameter of HTTP requests and perform unauthorized actions such as stealing internal information and performing actions in context of an authenticated user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fresenius-Kabi | Agilia Connect Firmware | through d25 |
| Fresenius-Kabi | Agilia Partner Maintenance Software | through 3.3.0 |
| Fresenius-Kabi | Vigilant Centerium | Version 1.0 |
| Fresenius-Kabi | Vigilant Insight | Version 1.0 |
| Fresenius-Kabi | Vigilant Mastermed | Version 1.0 |
| Fresenius-Kabi | Link\+ Agilia Firmware | before 3.0 Version 3.0 |