Stored XSS on SNS Enrollment Portal (Stormshield Stormshield Network Security)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.21 % · percentile 12 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- airbus
- NVD status
- Deferred
Description
A Stored Cross-Site Scripting vulnerability exists in the SNS enrollment Portal. Through the captive portal an attacker can inject an XSS when requesting user creation. The stored XSS can only be triggered during validation by the administrator.
Weaknesses (CWE)
- CWE-79 — Improper Neutralization of Input During Web Page Generation
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.1 | CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H | airbus |
| CVSS 3.1 | HIGH 7.1 | CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H | NVD · cert@airbus.com (Secondary) |
European references
- ENISA EUVD · EUVD-2026-105253
- GCVE · GCVE-0-2026-113808
CERT-FR advisories
- CERTFR-2026-AVI-1345 — Multiples vulnérabilités dans les produits StormShield · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Stormshield · Stormshield Network Security | affected 4.3.0 ≤ 4.3.44 ; affected 4.8.0 ≤ 4.8.19 ; affected 5.0.0 ≤ 5.0.9 ; affected 5.1.0 ≤ 5.1.3 ; unaffected 4.3.45 QS ; unaffected 4.8.20 LTSB |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |