VULNERABILITY INTELLIGENCE

CVE-2021-23283

CVSS score5.2 MEDIUM
EPSS probability0.53%
CISA KEVNot currently listed
Published2022-04-19
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

Description

Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerability exists due to insufficient validation of user input and improper encoding of the output for certain resources within the IPP software.

Weakness classification

  • CybersecurityCOE@eaton.com: CWE-79
  • nvd@nist.gov: CWE-79

Primary references