CVE-2024-10208
Cross Site Scripting vulnerability in APROL Web Portal
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Cross Site Scripting vulnerability in APROL Web Portal
An Improper Neutralization of Input During Web Page Generation vulnerability in the APROL Web Portal used in B&R APROL <4.4-00P5 may allow an authenticated network-based attacker to insert malicious code which is then executed in the context of the user’s browser session.
Reserved 2024-10-21 | Published 2025-03-25 | Updated 2025-03-25 | Assigner ABBCWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
www.br-automation.com/fileadmin/SA24P015-77573c08.pdf
Support options
