XSS in Visualware Myconnection Server

CVE-2015-2043

Multiple cross-site scripting (XSS) vulnerabilities in Visualware MyConnection Server 8.2b allow remote attackers to inject arbitrary web script or HTML via the (1) bt, (2) variable, or (3) et parameter to myspeed/db/historyitem.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.010 (59.6th percentile) — read the EPSS interpretation.

Affected products

Visualware Myconnection_server — versions 8.2b
N/a — versions n/a

Weakness classification (CWE)

CWE-79 — Cross-site Scripting

References

cve@mitre.org (Exploit, x_refsource_MISC)