← All advisories

Medium severity6.1NVD Advisory· Published Sep 15, 2019· Updated Jun 17, 2026

CVE-2019-16321

CVE-2019-16321

Description

ScadaBR 1.0CE, and 1.1.x through 1.1.0-RC, has XSS via a request for a nonexistent resource, as demonstrated by the dwr/test/ PATH_INFO.

Affected products

4

Scadabr/Scadabr3 versions
cpe:2.3:a:scadabr:scadabr:1.0ce:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:scadabr:scadabr:1.0ce:*:*:*:*:*:*:*
- cpe:2.3:a:scadabr:scadabr:1.1.0:rc:*:*:*:*:*:*
- (no CPE)range: 1.0CE, 1.1.x through 1.1.0-RC
ScadaBR/ScadaBRdescription

Patches

Vulnerability mechanics

References

1

misteralfa-hack.blogspot.com/2019/09/scadabr-scada-vulnerable-xss.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.