PT-2017-6619
CVE-2015-2883
·
تاريخ النشر
2017-04-10
·
تاريخ التحديث
2017-04-14
الوصف من
CVSS 2.0
3.5
منخفضةالمقاييسAV:N/AC:M/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Philips In.Sight B120/37
Description
The issue is related to the Weaved cloud web service and involves XSS. This can be demonstrated by the
name parameter to "deviceSettings.php" or "shareDevice.php" endpoints.Recommendations
For Philips In.Sight B120/37, avoid using the
name parameter in the affected "deviceSettings.php" or "shareDevice.php" endpoints until the issue is resolved. وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾