Medium severity5.4NVD Advisory· Published Dec 7, 2021· Updated Jun 17, 2026
CVE-2021-40093
CVE-2021-40093
Description
A cross-site scripting (XSS) vulnerability in integration configuration in SquaredUp for SCOM 5.2.1.6654 allows remote attackers to inject arbitrary web script or HTML via dashboard actions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:squaredup:squaredup:*:*:*:*:azure:*:*:*+ 4 more
- cpe:2.3:a:squaredup:squaredup:*:*:*:*:azure:*:*:*range: <5.3.1
- cpe:2.3:a:squaredup:squaredup:*:*:*:*:community:*:*:*range: <5.3.1
- cpe:2.3:a:squaredup:squaredup:*:*:*:*:system_center_operations_manager:*:*:*range: <5.3.1
- (no CPE)
- (no CPE)range: =5.2.1.6654
Patches
Vulnerability mechanics
References
2- support.squaredup.comnvdVendor Advisory
- support.squaredup.com/hc/en-us/articles/4410635418257-CVE-2021-40093-Stored-cross-site-scripting-Action-Buttons-nvdVendor Advisory
News mentions
0No linked articles in our index yet.