Medium severity6.1NVD Advisory· Published Oct 18, 2024· Updated Jun 17, 2026

CVE-2024-47486

Description

There is an XSS vulnerability in some HikCentral Master Lite versions. If exploited, an attacker could inject scripts into certain pages by building malicious data.

Affected products

HikCentral/HikCentral Master Litellm-create
Hikvision/HikCentral Master Litecpe-rescue
Range: Versions below V2.2.1 (including V2.2.1)
Hikvision/Hikcentral Master
cpe:2.3:a:hikvision:hikcentral_master:*:*:*:*:lite:*:*:*
Range: <2.3.0

Patches

Vulnerability mechanics

References

www.hikvision.com/en/support/cybersecurity/security-advisory/security-vulnerabilities-in-hikcentral-product-series/nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000