Medium severity6.1NVD Advisory· Published May 2, 2018· Updated Jun 17, 2026

CVE-2018-8900

Description

The License Manager service of HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE 7.80 allows remote attackers to inject malicious web script in the logs page of Admin Control Center (ACC) for cross-site scripting (XSS) vulnerability.

Affected products

Thales Group/Sentinel HASPllm-create

Patches

Vulnerability mechanics

References

drive.google.com/file/d/18BaBzGcjWAfJyZ_phWEVerYmmLB-vxF-/viewnvdVendor Advisory
cert-portal.siemens.com/productcert/pdf/ssa-566773.pdfnvd

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000