CVE-2026-39991 : 상세 정보

CVE-2026-39991

2026-10-15
10h17 +00:00
Cross-site Scripting
A03-Injection
2026-10-15
16h32 +00:00
특정 CVE 알림
특정 CVE의 변경 사항에 대한 정보를 받아보세요.
알림 관리

CVE 설명

A cross-site scripting (XSS) vulnerability has been reported to affect Notes Station 3. If a remote attacker gains a user account, they can then exploit the vulnerability to inject malicious code. We have already fixed the vulnerability in the following version: Notes Station 3 3.9.12 and later

CVE 정보

관련 약점

CWE-ID 약점 이름 출처
CWE-79 Improper Neutralization of Input During Web Page Generation
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

참고 자료