CVE-2021-23283 MEDIUM

CVE-2021-23283: Security issues in Eaton Intelligent Power Protector (IPP)

Vendor Eaton
Product Eaton Intelligent Power Protector (IPP)
Weakness CWE-79 · XSS
Published April 19, 2022
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

5.2/10
Attack vector Adjacent
Attack complexity Low
Privileges required High
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H

What the vulnerability does

01Description

Eaton Intelligent Power Protector (IPP) prior to version 1.69 is vulnerable to stored Cross Site Scripting. The vulnerability exists due to insufficient validation of user input and improper encoding of the output for certain resources within the IPP software.

Key dates

02Disclosure timeline

April 19, 2022 CVE published
September 17, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2015-10119 View All Posts Page Plugin view-all-posts-pages.php action_admin_notices_activation cross site scripting CVE-2025-28960 WordPress Evangelische Termine plugin <= 3.3 - Cross Site Scripting (XSS) Vulnerability CVE-2025-47026 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2024-51762 WordPress PropertyShift plugin <= 1.0.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2022-3223 Cross-site Scripting (XSS) - Stored in jgraph/drawio