VULNERABILITY INTELLIGENCE
CVE-2024-10208
EPSS probability0.41%
CISA KEVNot currently listed
Published2025-03-25
Last modified2026-06-17
Description
An Improper Neutralization of Input During Web Page Generation vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an authenticated network-based attacker to insert malicious code which is then executed in the context of the user’s browser session.
Weakness classification
- cybersecurity@ch.abb.com: CWE-79