Cross-site Scripting

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. Reflected XSS in TimeProvider 4100 chart componentCVE-2024-43686Microchip · CVSS 5.4 · 13% likely

   CWE-79

2. XSS vulnerability in bannerconfig endpoint in TimeProvider 4100CVE-2024-43687Microchip · CVSS 7.7 · 0.8% likely

   CWE-79

3. Symmetricom SyncServer S100 2.90.70.3, S200 1.30, S250 1.25, S300 2.65.0, and S350 2.80.1 devices allow stored XSS via the newUserName parameter on the "User Creation, Deletion an…CVE-2020-9028Microchip · 0.7% likely

   CWE-79

4. TimePictra Stored Cross-site ScriptingCVE-2026-8333Microchip · CVSS 9.4 · 0.4% likely

   CWE-79

5. Cross-Site Scripting (XSS) Vulnerability in Password Reset Redirect in GridTime™ 3000 GNSS Time ServerCVE-2026-12621Microchip · CVSS 5.3 · 0.2% likely

   CWE-79

6. GridTime™ 3000 GNSS Time Server CSRF to XSSCVE-2026-12619Microchip · CVSS 5.1 · 0.2% likely

   CWE-79

7. TimePictra Stored Cross-Site ScriptingCVE-2026-3010Microchip · CVSS 9.3 · 0.2% likely

   CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.