Approved changes feed: RSS · Atom

cpe:2.3:h:honeywell:mpa2:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorHoneywell (98681534-528d-57d2-bf2a-17f1d63c09c9)
ProductMpa2 (575d0883-3683-594a-91d4-4e9263f7ba97)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-1841 not_vulnerable 2026-06-08 05:52:37.123745 Honeywell MPA2 Web Application XSS vulnerability
HIGH (8.1)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Honeywell MPA2 Access Panel (Web server modules) allows XSS Using Invalid Characters.This issue affects MPA2 Access Panel all version prior to R1.00.08.05.  Honeywell released firmware update package MPA2 firmware R1.00.08.05 which addresses this vulnerability. This version and all later versions correct the reported vulnerability.
Published: 2024-02-29T05:09:14.716Z
Updated: 2024-08-02T06:05:26.725Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.