Parsons AccuWeather widget

Risk Summary

Successful exploitation of this vulnerability could allow an attacker to insert a malicious link that users might access through the RSS feed.

CVEs (1)

Remediations

• Parsons Utility Enterprise Data Management Customers - This vulnerability has been patched in all instances managed by Parsons as of January 7, 2025. No end-user action is required.
• AclaraONE Hosted Customers – This vulnerability has been patched in all instances managed by Aclara as of February 7, 2025. No end-user action is required.
• AclaraONE On Premise Customers - End-user action is required. A patch and mitigation information for AclaraOne is available through the Aclara Connect Customer Portal. If you prefer assistance, Aclara Support would be happy to help. Customers may request an appointment to apply the patch update by opening a ticket on the Aclara Connect Customer Portal, or by contacting us by phone or email. Requests will be processed in the order received.

Affected Vendors

Affected Products (5)

Affected Sectors

Communications