Lucene search

[email protected]CVE-2020-13168

HistoryOct 02, 2020 - 9:15 a.m.

CVE-2020-13168

2020-10-0209:15:13

CWE-79

[email protected]

web.nvd.nist.gov

sysaid

20.1.11b26

reflected xss

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

44.8%

JSON

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.

Affected configurations

NVD

Node

sysaidsysaid_on-premisesMatch5.0

sysaidsysaid_on-premisesMatch5.5.06

sysaidsysaid_on-premisesMatch5.6

sysaidsysaid_on-premisesMatch6.0.9

sysaidsysaid_on-premisesMatch6.5

sysaidsysaid_on-premisesMatch7.0

sysaidsysaid_on-premisesMatch7.5

sysaidsysaid_on-premisesMatch8.0

sysaidsysaid_on-premisesMatch8.1

sysaidsysaid_on-premisesMatch8.5

sysaidsysaid_on-premisesMatch9.0.10

sysaidsysaid_on-premisesMatch9.0.30

sysaidsysaid_on-premisesMatch9.0.40

sysaidsysaid_on-premisesMatch9.0.52

sysaidsysaid_on-premisesMatch9.0.53

sysaidsysaid_on-premisesMatch9.1.0

sysaidsysaid_on-premisesMatch14.1

sysaidsysaid_on-premisesMatch14.2

sysaidsysaid_on-premisesMatch14.3

sysaidsysaid_on-premisesMatch14.4.00

sysaidsysaid_on-premisesMatch14.4.1

sysaidsysaid_on-premisesMatch14.4.2

sysaidsysaid_on-premisesMatch14.4.3

sysaidsysaid_on-premisesMatch15.1.20

sysaidsysaid_on-premisesMatch15.1.30

sysaidsysaid_on-premisesMatch15.1.50

sysaidsysaid_on-premisesMatch15.1.70

sysaidsysaid_on-premisesMatch15.2.03

sysaidsysaid_on-premisesMatch15.2.04

sysaidsysaid_on-premisesMatch15.2.05

sysaidsysaid_on-premisesMatch16.3.16

sysaidsysaid_on-premisesMatch16.3.17

sysaidsysaid_on-premisesMatch17.2.03

sysaidsysaid_on-premisesMatch17.3.57

sysaidsysaid_on-premisesMatch18.1.54

sysaidsysaid_on-premisesMatch19.2

sysaidsysaid_on-premisesMatch19.4

sysaidsysaidsy_on-premisesMatch20.1.11b26

CPENameOperatorVersion
sysaid:sysaid_on-premisessysaid sysaid on-premiseseq5.0
sysaid:sysaid_on-premisessysaid sysaid on-premiseseq5.5.06
sysaid:sysaid_on-premisessysaid sysaid on-premiseseq5.6
sysaid:sysaid_on-premisessysaid sysaid on-premiseseq6.0.9
sysaid:sysaid_on-premisessysaid sysaid on-premiseseq6.5
sysaid:sysaid_on-premisessysaid sysaid on-premiseseq7.0
sysaid:sysaid_on-premisessysaid sysaid on-premiseseq7.5
sysaid:sysaid_on-premisessysaid sysaid on-premiseseq8.0
sysaid:sysaid_on-premisessysaid sysaid on-premiseseq8.1
sysaid:sysaid_on-premisessysaid sysaid on-premiseseq8.5

CPE	Name	Operator	Version
sysaid:sysaid_on-premises	sysaid sysaid on-premises	eq	5.0
sysaid:sysaid_on-premises	sysaid sysaid on-premises	eq	5.5.06
sysaid:sysaid_on-premises	sysaid sysaid on-premises	eq	5.6
sysaid:sysaid_on-premises	sysaid sysaid on-premises	eq	6.0.9
sysaid:sysaid_on-premises	sysaid sysaid on-premises	eq	6.5
sysaid:sysaid_on-premises	sysaid sysaid on-premises	eq	7.0
sysaid:sysaid_on-premises	sysaid sysaid on-premises	eq	7.5
sysaid:sysaid_on-premises	sysaid sysaid on-premises	eq	8.0
sysaid:sysaid_on-premises	sysaid sysaid on-premises	eq	8.1
sysaid:sysaid_on-premises	sysaid sysaid on-premises	eq	8.5

Rows per page:

1-10 of 381

References

github.com/lodestone-security/CVEs/tree/master/CVE-2020-13168

www.sysaid.com/product/on-premise/latest-release

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.001 Low

EPSS

Percentile

44.8%

JSON

Related for CVE-2020-13168

cvelist1 prion1 nvd1