CVE-2021-22291

HIGH

EIBPORT Reflected XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-22291 has a selected CVSS score of 8.5 (high).

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2.

Description source: CVE List

Exploitation context

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactTotal

CISA Coordinator · SSVC 2.0.3 · Evaluated Oct 7, 2025 · Source: CVE List

Affected products and versions

2
ProductSourceVersion range

EIBPORT V3 KNX

Browse ABB / EIBPORT V3 KNX

Default status: unaffected

CVE ListBefore 3.9.2affected

EIBPORT V3 KNX GSM

Browse ABB / EIBPORT V3 KNX GSM

Default status: unaffected

CVE ListBefore 3.9.2affected

References

2