VULNERABILITY INTELLIGENCE
CVE-2024-8528
EPSS probability0.13%
CISA KEVNot currently listed
Published2025-11-19
Last modified2026-06-17
Description
Reflected XSS using a specific URL in Automated Logic WebCTRL and Carrier i-VU can allow delivery of malicious payload due to a specific GET parameter not being sanitized.
Weakness classification
- productsecurity@carrier.com: CWE-79