Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2021-32005 Details
Description
Cross-site Scripting (XSS) vulnerability in log view of Secomea SiteManager allows a logged in user to store javascript for later execution. This issue affects: Secomea SiteManager Version 9.6.621421014 and all prior versions.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://www.secomea.com/support/cybersecurity-advisory/#5017 | CVE | Not ApplicableVendor Advisory |
| https://www.secomea.com/support/cybersecurity-advisory/#5017 | [email protected] | Not ApplicableVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | [email protected] |
| CWE-79 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| secomea sitemanager 1129 firmware | < 9.6.621421014 |
CPE
Remediation
| |
| secomea sitemanager 1129 | All versions |
CPE
Remediation
| |
| secomea sitemanager 1139 firmware | < 9.6.621421014 |
CPE
Remediation
| |
| secomea sitemanager 1139 | All versions |
CPE
Remediation
| |
| secomea sitemanager 1149 firmware | < 9.6.621421014 |
CPE
Remediation
| |
| secomea sitemanager 1149 | All versions |
CPE
Remediation
| |
| secomea sitemanager 3329 firmware | < 9.6.621421014 |
CPE
Remediation
| |
| secomea sitemanager 3329 | All versions |
CPE
Remediation
| |
| secomea sitemanager 3339 firmware | < 9.6.621421014 |
CPE
Remediation
| |
| secomea sitemanager 3339 | All versions |
CPE
Remediation
| |
| secomea sitemanager 3349 firmware | < 9.6.621421014 |
CPE
Remediation
| |
| secomea sitemanager 3349 | All versions |
CPE
Remediation
| |
| secomea sitemanager 3529 firmware | < 9.6.621421014 |
CPE
Remediation
| |
| secomea sitemanager 3529 | All versions |
CPE
Remediation
| |
| secomea sitemanager 3539 firmware | < 9.6.621421014 |
CPE
Remediation
| |
| secomea sitemanager 3539 | All versions |
CPE
Remediation
| |
| secomea sitemanager 3549 firmware | < 9.6.621421014 |
CPE
Remediation
| |
| secomea sitemanager 3549 | All versions |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Mar 12, 2022 | Initial Analysis | [email protected] |