CyberSec.Space Logo
Back to CVE Browser

CVE-2021-23856

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1900%
EPSS Percentile7.32th
PublishedOct 4, 2021
Last ModifiedNov 21, 2024

Vulnerability Description

The web server is vulnerable to reflected XSS and therefore an attacker might be able to execute scripts on a client’s computer by sending the client a manipulated URL.

Affected Platforms (CPE)

💻
Bosch

Rexroth Indramotion Mlc L20 Firmware

All versions
💻
Bosch

Rexroth Indramotion Mlc L40 Firmware

All versions

References & Advisories

🔗 https://psirt.bosch.com/security-advisories/bosch-sa-741752.html
🔗 https://psirt.bosch.com/security-advisories/bosch-sa-741752.html

Related Vulnerabilities

CVE-2021-3467910.0

Thycotic Password Reset Server before 5.3.0 allows credential disclosure.

CVE-2021-138810.0

A vulnerability in an API endpoint of Cisco ACI Multi-Site Orchestrator (MSO) installed on the Application Services Engine could a...

CVE-2021-4155610.0

sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to ...

CVE-2021-2132110.0

fastify-reply-from is an npm package which is a fastify plugin to forward the current http request to another server. In fastify-r...