CVE-2024-37776

MediumCVSS 4.8

Published: 16/12/2024(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.29%

21th percentile - higher than 21% of all known CVEs

Summary

A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to inject malicious scripts or HTML on certain admin screens.

Risk Assessment

The risk includes potential session hijacking of administrators, data theft, or unauthorized actions within the data center infrastructure management system.

Recommendation

Immediately update Sunbird DCIM dcTrack to the latest available version that fixes this vulnerability. Until then, restrict admin panel access to trusted users only.

Original NVD description (English source)

A cross-site scripting (XSS) vulnerability in Sunbird DCIM dcTrack v9.1.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in some admin screens.