{"cve":"CVE-2021-45092","epss":{"score":0.40584},"mitre":{"cpes":[],"created":"2021-12-16T03:07:32+00:00","description":"Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2021/45xxx/CVE-2021-45092.json","references":["http://packetstormsecurity.com/files/166068/Thinfinity-VirtualUI-2.5.41.0-IFRAME-Injection.html","https://github.com/cybelesoft/virtualui/issues/2"],"title":null,"updated":"2024-08-04T04:32:13.635000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:a:cybelesoft:thinfinity_virtualui:*:*:*:*:*:*:*:*"],"created":"2021-12-16T04:15:06.747000+00:00","description":"Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.","metrics":{"cvssV2_0":{"score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},"cvssV3_0":{},"cvssV3_1":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2021/CVE-2021-45092.json","references":["http://packetstormsecurity.com/files/166068/Thinfinity-VirtualUI-2.5.41.0-IFRAME-Injection.html","https://github.com/cybelesoft/virtualui/issues/2"],"title":null,"updated":"2026-06-17T04:13:09.610000+00:00","vendors":["cybelesoft","cybelesoft$PRODUCT$thinfinity_virtualui"],"weaknesses":["NVD-CWE-Other"]},"opencve":{"changes":[],"cpes":{"data":["cpe:2.3:a:cybelesoft:thinfinity_virtualui:*:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2021-12-16T03:07:32+00:00","provider":"mitre"},"description":{"data":"Thinfinity VirtualUI before 3.0 has functionality in /lab.html reachable by default that could allow IFRAME injection via the vpath parameter.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P"},"provider":"nvd"},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"provider":"nvd"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.40584},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["http://packetstormsecurity.com/files/166068/Thinfinity-VirtualUI-2.5.41.0-IFRAME-Injection.html","https://github.com/cybelesoft/virtualui/issues/2"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2024-11-21T06:31:56.293000+00:00","provider":"nvd"},"vendors":{"data":["cybelesoft","cybelesoft$PRODUCT$thinfinity_virtualui"],"providers":["nvd"]},"weaknesses":{"data":["NVD-CWE-Other"],"providers":["nvd"]}}}