CVE-2022-28172
The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit th…
Published: 2022-06-27 · CVSS: 6.5 · CVSS 3.1
The web module in some Hikvision Hybrid SAN/Cluster Storage products have the following security vulnerability. Due to the insufficient input validation, attacker can exploit the vulnerability to XSS attack by sending messages with malicious commands to the affected device.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7