Medium severity5.4NVD Advisory· Published Mar 3, 2025· Updated Jun 17, 2026
CVE-2024-55064
CVE-2024-55064
Description
Multiple cross-site scripting (XSS) vulnerabilities in EasyVirt DC NetScope <= 8.6.4 allow remote attackers to inject arbitrary JavaScript or HTML code via the (1) smtp_server, (2) smtp_account, (3) smtp_password, or (4) email_recipients parameter to /smtp/update; the (5) ntp or (6) dns parameter to /proxy/ntp/change; the (7) newVcenterAddress parameter to /process_new_vcenter.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:easyvirt:dc_netscope:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:easyvirt:dc_netscope:*:*:*:*:*:*:*:*range: <=8.6.4
- (no CPE)
- (no CPE)range: <=8.6.4
Patches
Vulnerability mechanics
References
1- github.com/Elymaro/CVE/blob/main/EasyVirt/CVE-2024-55064.mdnvdThird Party Advisory
News mentions
0No linked articles in our index yet.