Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.4
CVE-2021-40094: A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device.
CVE-2021-40094 · published 4 years ago
Summary
A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device.
What to do
- Update squaredup squaredup to version 5.3.1 or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| squaredup | squaredup |
< 5.3.1 cpe:2.3:a:squaredup:squaredup:*:*:*:*:azure:*:*:* |
Original advisory text
A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device.
A DOM-based XSS vulnerability affects SquaredUp for SCOM 5.2.1.6654. If successfully exploited, this vulnerability may allow attackers to inject malicious code into a user's device.
References
- https://support.squaredup.com Vendor Advisory
- https://support.squaredup.com/hc/en-us/articles/4410656395537-CVE-2021-40094-DOM... Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Type
CWE-79Cross-site Scripting (XSS)
Timeline
Published7 Dec 2021
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2021-40094 · NVD
Track software like this
Free during beta