CVE Feed

    Dashboard / CVE / CVE-2024-6516

    CVE-2024-6516

    Cross Site Scripting vulnerabilities where found providing a potential for malicious scripts to be injected into a client browser.  Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02

    Published:Dec 5, 2024
    Last Modified:Dec 5, 2024
    EPS:Dec 5, 2024
    EPSS Score:0.01197
    CVSS Score:9

    Affected Products

    Vendor
    Abb
    Product
    Aspect Enterprise
    Vendor
    Abb
    Product
    Matrix Series
    Vendor
    Abb
    Product
    Nexus Series

    Exploits

    https://www.exploit-db.com/exploits/52217https://www.exploit-db.com/exploits/52214https://www.exploit-db.com/exploits/52215

    Related CVEs

    CVE-2025-7679 (CVSS 9.2) — The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT…
    CVE-2025-7677 (CVSS 8.2) — A denial-of-service (DoS) attack is possible if access to the local network is provided to unauthorized users.…
    CVE-2025-53191 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53190 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53189 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53188 — This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.…
    CVE-2025-53187 (CVSS 9.3) — Due to an issue in configuration, code that was intended for debugging purposes was included in the market rel…
    CVE-2024-13945 (CVSS 8.4) — Stored Absolute Path Traversal vulnerabilities in ASPECT could expose sensitive data if administrator credent…
    CVE-2024-51552 (CVSS 7.1) — Weak password storage vulnerabilities exist in ASPECT if administrator credentials become compromisedThis issu…
    CVE-2024-13958 (CVSS 4.6) — Stored Cross Site Scripting vulnerabilities exist in ASPECT if administrator creden-tials become compromisedTh…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High