Headline
CVE-2023-44315
A vulnerability has been identified in SINEC NMS (All versions < V2.0). The affected application improperly sanitizes certain SNMP configuration data retrieved from monitored devices. An attacker with access to a monitored device could prepare a stored cross-site scripting (XSS) attack that may lead to unintentional modification of application data by legitimate users.
%PDF-1.5 %���� 51 0 obj << /Length 2748 /Filter /FlateDecode >> stream xڵZ�r�8}�W�m��ƕ\�ⱕ�gc�kɞ�J�A�h�;��!�����M�IQ �����H�h����4h:x����_�g�� XbC ��M� Á��(����s0��U�Ά#�M0���t8b*���n�r�-�4�C_���nL�O��v�_� ���t���׳���3���(��Wg����<�u@��f�V��H%������ٿϨW��m�D�� 5��L#�ղY�G��J��R���xM.G,�\��}��R��>�+�֮K�0�K� �8~�I�2Mn��<�,�}��q��/�P�>g!���a��� ���4�M�OÐ��:Jg_�e��Q���`�X�O�D0I�V}D�ٌ��4 ₩�&�8��$����Y/A�h�0aYk �܍�:�kAt?� Į5 U�`R��A������v��\RCBy��%�������1�(L�-���1�&i�ΕJ�L��+� ѐa{���J ������ -��sw�*��1�Y�`��B���ۢ�,��,���+0׳<��Rd$8�b�(�����cĪ�M�8�r7�q�p��f��,�f]m�4Z��OCC�(�`u�-�a�#��&7��0w��,�|���A�U�Y�aȈ:^�WJv�d?YxW���c�߿����CE��q��A��X�m�8� W�!� Egtmq��?{.ވ�y��g 3�3O^@���Z�u�^4^�rX���$�FY�����3�M �_�Ջ�0d4p5�;\ҀT��� ��w^g�"����D�am��q��ޣ 6�tH�y��5^v��K+��W?��Ge�~r�� �FQs4X`Sr�#X��!�c������t|�Av P�ge�n���;�x� Z�c�Q�P-��v�� �� y�YA�9MI��. �ʛ5@X�E�w ��b>8碀�’pt7M�Ga�J������ͧ������9�e$�����a��s�:��M2@�� ��xـ���>@�A�?=H_���FGّ��28�9� ��F��Z_Sڸ֬��g(�K�%dY�Ȳ�i���j��’���U����4s �K���=���.�S "���!�y�l�� E�SPA�j��?��~�O���D�-��h��z�����m �����*��r)������݂o#HШ5H��r�W�| �g�6�ag8� ZV�RW���LYڱ�{zx��Q\� гe+S��Ct�tK���&�8?϶�Mq�b�����6�q �Ț�d��0�������