CVE-2018-6189 F-Secure Radar (on-premises) before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/latest/vulnerabilityscans/tags/batch resour...
MediumCVSS 6.1
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
F-Secure Radar (on-premises) before 2018-02-15 has XSS via vectors involving the Tags parameter in the JSON request body in an outbound request for the /api/latest/vulnerabilityscans/tags/batch resource, aka a "suggested metadata tags for assets" issue.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| f-secure radar | <= 3.9.1 | No fix listed |
References
- oscarhjelm.com third-party-advisory
- 103100 third-party-advisory vdb-entry