Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-gx8g-pw4x-wmmv

Опубликовано: 09 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 2.1
CVSS3: 9.6

Описание

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation.

This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts.

The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

EPSS

Процентиль: 12%
0.00217
Низкий

2.1 Low

CVSS4

9.6 Critical

CVSS3

Дефекты

CWE-86

Связанные уязвимости

CVSS3: 9.6
nvd
6 месяцев назад

A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly encode URLs. An attacker could tamper with web pages or execute malicious scripts. The affected products and versions are as follows: FAST/TOOLS (Packages: RVSVRN, UNSVRN, HMIWEB, FTEES, HMIMOB) R9.01 to R10.04

CVSS3: 3.4
fstec
6 месяцев назад

Уязвимость SCADA-системы Yokogawa FAST/TOOLS, связанная с непринятием мер по нейтрализации недопустимых символов в идентификаторах на веб-страницах, позволяющая нарушителю провести атаку межсайтового скриптинга (XSS)

EPSS

Процентиль: 12%
0.00217
Низкий

2.1 Low

CVSS4

9.6 Critical

CVSS3

Дефекты

CWE-86