Volerion logoVolerion
Volerion logoVolerion

PcVue OAuth Web Services Cross-Site Scripting Vulnerability

Vulnerability

A cross-site scripting (XSS) vulnerability has been identified in the OAuth web services utilized by PcVue's WebVue, WebScheduler, TouchVue, and SnapVue features. This vulnerability affects PcVue versions 12.0.0 through 16.3.3. It may allow a remote attacker to deceive a legitimate user into loading content from an external site, particularly when user authentication fails on an unspecified application. The issue is confined to the error page of the OAuth server.

Impact

Exploitation of this vulnerability could lead to cross-site scripting, allowing for the injection of malicious scripts that could be executed in the context of the user's browser.

Remediation

Users can upgrade to PcVue version 16.3.4 to address this vulnerability. For PcVue 15 users, version 15.2.14 is available.

Added: Feb 26, 2026, 10:40 AM
Updated: Feb 26, 2026, 10:40 AM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
1.7
exploitability
5.4
remediation
7.7
relevance
3.2
threat
0.0
urgency
0.0
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.