VYPR
Medium severity6.1NVD Advisory· Published Jun 3, 2019· Updated Jun 17, 2026

CVE-2017-14850

CVE-2017-14850

Description

All known versions of the Orpak SiteOmat web management console is vulnerable to multiple instances of Stored Cross-site Scripting due to improper external user-input validation. An attacker with access to the web interface is able to hijack sessions or navigate victims outside of SiteOmat, to a malicious server owned by him.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Orpak/SiteOmat2 versions
    cpe:2.3:a:orpak:siteomat:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:orpak:siteomat:*:*:*:*:*:*:*:*range: <6.4.414.084
    • (no CPE)
  • Orpak/Orpak SiteOmat web management consoledescription

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.