PT-2026-3810 · Genexis · Platinum-4410

Jithin Ks · Published 2026-01-21 · Updated 2026-01-21 · CVE-2021-47858

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Genexis Platinum-4410 version P4410-V2-1.31A

Description A stored cross-site scripting issue exists in the Security Management interface. Attackers can inject malicious scripts through the start addr parameter in the start source address field. These scripts persist and execute when privileged users access the security management page.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-47858

Affected Products

Platinum-4410

References · 4

• 🔥 https://exploit-db.com/exploits/49709 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47858 · Security Note
• https://vulncheck.com/advisories/genexis-platinum-p-a-startaddr-persistent-cross-site-scripting · Note
• https://genexis.eu/product/platinum-series · Note