ABB ASPECT Log Injection Vulnerability Allowing Script Injection via Compromised Admin Credentials

A log injection vulnerability has been identified in ABB ASPECT products, including ASPECT-Enterprise, NEXUS Series, and MATRIX Series, all through version 3.*. This vulnerability allows attackers to inject malicious scripts that could be executed in the browser, provided they can obtain administrator credentials.

Impact

Exploitation of this vulnerability could lead to cross-site scripting (XSS) attacks, where injected scripts are executed in the context of the user's browser.