VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 29, 2019· Updated Sep 16, 2024

CVE-2018-18985

CVE-2018-18985

Description

Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.96.28.4 a cross-site scripting vulnerability has been identified that may allow a remote attacker to inject code to some web pages affecting confidentiality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Tridium/Niagara Axllm-create2 versions
    <4.6.96.28.4+ 1 more
    • (no CPE)range: <4.6.96.28.4
    • (no CPE)range: <3.8.401.1
  • Tridium/Niagara Enterprise Securityllm-fuzzy
    Range: <2.3.118.6
  • Tridium/Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.96.28.4v5
    Range: Tridium Niagara Enterprise Security 2.3u1, all versions prior to 2.3.118.6, Niagara AX 3.8u4, all versions prior to 3.8.401.1, Niagara 4.4u2, all versions prior to 4.4.93.40.2, and Niagara 4.6, all versions prior to 4.6.96.28.4

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.