6.1
CVE-2021-45476
- EPSS 0.36%
- Veröffentlicht 27.10.2022 10:15:10
- Zuletzt bearbeitet 18.05.2026 13:16:31
- Quelle iletisim@usom.gov.tr
- CVE-Watchlists
- Unerledigt
LoginInformation disclosure in Yordam Library Information Document Automation Program
Yordam Library Information Document Automation product before version 19.02 has an unauthenticated reflected XSS vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Yordam ≫ Library Automation System Version < 19.02
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.36% | 0.273 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.1 | 2.8 | 2.7 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
| iletisim@usom.gov.tr | 4.7 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
https://www.usom.gov.tr/bildirim/tr-22-0669
https://siberguvenlik.gov.tr/guvenlik-bildirimleri/detay/tr-22-0669