NetSight
IP …
medium4.1

CVE-2022-40204

A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages aft…

Impact

A cross-site scripting (XSS) vulnerability exists in all current versions of Digital Alert Systems DASDEC software via the Host Header in undisclosed pages after login.

Affected products

VendorProductAffected versions
DigitalalertsystemsDasdec Ii Firmware
All versions
DigitalalertsystemsOne-Net Se Firmware
All versions
DigitalalertsystemsDasdec I Firmware
All versions
DigitalalertsystemsOne-Net Firmware
All versions
DigitalalertsystemsDasdec Iii Firmware
All versions

Weakness classification

CWE-79

References