CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 4.8. It affects Java. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
CVE
CVE-2024-8457
Severity
MEDIUM
CVSS
4.8
EPSS
0.29%
Java
Original NVD Description
Certain switch models from PLANET Technology have a web application that does not properly validate specific parameters, allowing remote authenticated users with administrator privileges to inject arbitrary JavaScript, leading to Stored XSS attack.
Related CVEs
Other vulnerabilities affecting the same vendor(s)