CVE:CVE-2022-25784
CNNVD:CNNVD-202205-2117
Secomea SiteManager是丹麦 （Secomea）公司的一个应用软件。提供一个工业设备远程维护功能。
Secomea SiteManager 9.7 之前的所有版本存在安全漏洞，该漏洞源于 SiteManager 的 Web GUI 中的跨站点脚本 (XSS) 漏洞允许登录用户注入脚本。
solution:Upgrade secomea sitemanager_1129_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea sitemanager_1139_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea sitemanager_1149_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea sitemanager_3329_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea sitemanager_3339_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea sitemanager_3349_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea sitemanager_3529_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea sitemanager_3539_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021); Upgrade secomea sitemanager_3549_firmware to a higher version than 9.7.622134021,and avoid the version (,9.7.622134021)