CVE-2021-47743: Commax Co., Ltd Commax Biometric Access Control System

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

COMMAX Biometric Access Control System 1.0.0 contains an unauthenticated reflected cross-site scripting vulnerability in cookie parameters 'CMX_ADMIN_NM' and 'CMX_COMPLEX_NM'. Attackers can inject malicious HTML and JavaScript code into these cookie values to execute arbitrary scripts in a victim's browser session.

Affected products

• Commax Co., Ltd Commax Biometric Access Control System: version 1.0.0 only

Published 2025-12-31. Last modified 2026-06-17.