CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Java.
CVE
CVE-2018-18991
Severity
MEDIUM
CVSS
6.1
EPSS
0.85%
Java
Original NVD Description
Reflected cross-site scripting (non-persistent) in SCADA WebServer (Versions prior to 2.03.0001) could allow an attacker to send a crafted URL that contains JavaScript, which can be reflected off the web application to the victim's browser.
Related CVEs
Other vulnerabilities affecting the same vendor(s)