Medium severity5.4NVD Advisory· Published Dec 7, 2021· Updated Jun 17, 2026
CVE-2021-40094
CVE-2021-40094
Description
A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:squaredup:squaredup:*:*:*:*:azure:*:*:*+ 4 more
- cpe:2.3:a:squaredup:squaredup:*:*:*:*:azure:*:*:*range: <5.3.1
- cpe:2.3:a:squaredup:squaredup:*:*:*:*:community:*:*:*range: <5.3.1
- cpe:2.3:a:squaredup:squaredup:*:*:*:*:system_center_operations_manager:*:*:*range: <5.3.1
- (no CPE)
- (no CPE)range: = 5.2.1.6654
Patches
Vulnerability mechanics
References
2- support.squaredup.comnvdVendor Advisory
- support.squaredup.com/hc/en-us/articles/4410656395537-CVE-2021-40094-DOM-based-stored-cross-site-scriptingnvdVendor Advisory
News mentions
0No linked articles in our index yet.