CVE-2021-23863: Bosch Video Security

Medium severity, CVSS 6.1. EPSS: 0.6% chance of exploitation in the next 30 days.

HTML code injection vulnerability in Android Application, Bosch Video Security, version 3.2.3. or earlier, when successfully exploited allows an attacker to inject random HTML code into a component loaded by WebView, thus allowing the Application to display web resources controlled by the attacker.

Affected products

• Bosch Video Security: before 3.2.4 (fixed in 3.2.4)

Published 2022-01-28. Last modified 2026-06-17.