Name of the Vulnerable Software and Affected Versions Dr.Web Enterprise Security Suite (affected versions not specified)

Description The issue exists due to inadequate protection of the web page structure in the "Security Control Center" component. This allows a remote attacker to execute arbitrary HTML code in the user's browser by placing it in the "Task Name" field on the "Task Scheduler" tab.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.