Medium severity5.4NVD Advisory· Published Dec 7, 2021· Updated Jun 17, 2026
CVE-2021-40092
CVE-2021-40092
Description
A cross-site scripting (XSS) vulnerability in Image Tile in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via an SVG file.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:squaredup:squaredup:*:*:*:*:azure:*:*:*+ 4 more
- cpe:2.3:a:squaredup:squaredup:*:*:*:*:azure:*:*:*range: <5.3.1
- cpe:2.3:a:squaredup:squaredup:*:*:*:*:community:*:*:*range: <5.3.1
- cpe:2.3:a:squaredup:squaredup:*:*:*:*:system_center_operations_manager:*:*:*range: <5.3.1
- (no CPE)
- (no CPE)range: = 5.2.1.6654
Patches
Vulnerability mechanics
References
2- support.squaredup.comnvdVendor Advisory
- support.squaredup.com/hc/en-us/articles/4410635417233-CVE-2021-40092-Stored-cross-site-scripting-Image-tile-nvdVendor Advisory
News mentions
0No linked articles in our index yet.