Medium severity6.1NVD Advisory· Published Oct 5, 2017· Updated May 13, 2026
CVE-2017-13994
CVE-2017-13994
Description
A Cross-site Scripting issue was discovered in LOYTEC LVIS-3ME versions prior to 6.2.0. The web interface lacks proper web request validation, which could allow XSS attacks to occur if an authenticated user of the web interface is tricked into clicking a malicious link.
Affected products
2- Range: LOYTEC LVIS-3ME
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securityfocus.com/bid/100847nvdThird Party AdvisoryVDB Entry
- ics-cert.us-cert.gov/advisories/ICSA-17-257-01nvdThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.