title: OWASP Related Vulnerabilities in Hitachi  Energy’s LinkOne Product
description: Cross-site Scripting (XSS) vulnerability in Hitachi Energy LinkOne allows an attacker that manages to exploit the vulnerability can take advantage to exploit multiple web attacks and stole sensitive information. This issue affects: Hitachi Energy LinkOne 3.20; 3.22; 3.23; 3.24; 3.25; 3.26.
problem types: CWE-79 Cross-site Scripting (XSS)
affected:
{
product: LinkOne
vendor: Hitachi Energy
versions:
status: affected, version: 3.20
status: affected, version: 3.22
status: affected, version: 3.23
status: affected, version: 3.24
status: affected, version: 3.25
status: affected, version: 3.26
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.2
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N
version: 3.1
]
solutions: For each version, apply the available patch or update to version 3.27.