CVE Catalog

CVE-2026-30250

MediumCVSS 6.1
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.26%

18th percentile - higher than 18% of all known CVEs

Summary

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code.

Risk Assessment

Potential execution of malicious scripts in the browser of an administrator or other user, leading to data theft or application compromise.

Recommendation

Update ANOW! Automate to a patched version. Restrict access to the documentation field and apply input filtering.

Original NVD description (English source)

Cross-site scripting vulnerability in the user documentation field in Beta Systems Software AG ANOW! Automate v.3.3.1.90 allows a remote attacker to execute arbitrary code

Vulnerability data from NVD (NIST) · CISA KEV · EPSS