VULNERABILITY INTELLIGENCE
CVE-2021-3834
CVSS score5.4 MEDIUM
EPSS probability0.59%
CISA KEVNot currently listed
Published2021-10-07
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Description
Integria IMS in its 5.0.92 version does not filter correctly some fields related to the login.php file. An attacker could exploit this vulnerability in order to perform a cross-site scripting attack (XSS).
Weakness classification
- cve-coordination@incibe.es: CWE-79
- nvd@nist.gov: CWE-79
Primary references
- cve-coordination@incibe.es — Release Notes, Vendor Advisory
- cve-coordination@incibe.es
- af854a3a-2127-422b-91ae-364da2661108 — Release Notes, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108