CVE-2021-33231

MediumCVSS 5.4

Published: 20/10/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.54%

41th percentile - higher than 41% of all known CVEs

Summary

Cross Site Scripting (XSS) vulnerability in the New equipment page of EasyVista Service Manager 2018.1.181.1 allows remote attackers to execute arbitrary code via the notes field.

Risk Assessment

An attacker can inject malicious scripts, leading to session theft, defacement, or account takeover.

Recommendation

Upgrade to the latest version of EasyVista Service Manager and implement input filtering for the notes field.

Original NVD description (English source)

Cross Site Scripting (XSS) vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the notes field.