CVE-2024-10276

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-10276
A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

3.5 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 2.1 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

4.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://vuldb.com/?ctiid.281551 Permissions Required VDB Entry
https://vuldb.com/?id.281551 Third Party Advisory VDB Entry
https://vuldb.com/?submit.423695 Exploit Mitigation Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:telestream:sentry:6.0.9:*:*:*:*:*:*:*
History

01 May 2025, 14:37

Type Values Removed Values Added
CPE cpe:2.3:a:telestream:sentry:6.0.9:*:*:*:*:*:*:*
First Time Telestream
Telestream sentry
References () https://vuldb.com/?ctiid.281551 - () https://vuldb.com/?ctiid.281551 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.281551 - () https://vuldb.com/?id.281551 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.423695 - () https://vuldb.com/?submit.423695 - Exploit, Mitigation, Third Party Advisory

29 Oct 2024, 18:15

Type Values Removed Values Added
Summary (en) A vulnerability has been found in Tektronix Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. (en) A vulnerability has been found in Telestream Sentry 6.0.9 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /?page=reports of the component Reports Page. The manipulation of the argument z leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

23 Oct 2024, 15:12

Type Values Removed Values Added
Summary
  • (es) Se ha encontrado una vulnerabilidad en Tektronix Sentry 6.0.9 y se ha clasificado como problemática. Esta vulnerabilidad afecta a una funcionalidad desconocida del archivo /?page=reports del componente Reports Page. La manipulación del argumento z conduce a cross site scripting. El ataque se puede ejecutar de forma remota. El exploit se ha hecho público y puede utilizarse. Se contactó al proveedor primeramente sobre esta revelación, pero no respondió de ninguna manera.

23 Oct 2024, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-10-23 11:15

Updated : 2025-05-01 14:37

NVD link : CVE-2024-10276

Mitre link : CVE-2024-10276

CVE.ORG link : CVE-2024-10276

JSON object : View

Products Affected

telestream

  • sentry
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')