CVE-2024-55064: Easyvirt DC Netscope

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in EasyVirt DC NetScope <= 8.6.4 allow remote attackers to inject arbitrary JavaScript or HTML code via the (1) smtp_server, (2) smtp_account, (3) smtp_password, or (4) email_recipients parameter to /smtp/update; the (5) ntp or (6) dns parameter to /proxy/ntp/change; the (7) newVcenterAddress parameter to /process_new_vcenter.

Affected products

• Easyvirt DC Netscope: up to and including 8.6.4

Published 2025-03-03. Last modified 2026-06-17.