CVE-2020-35719

🗓️ 11 Jan 2021 03:13:15Reported by mitreType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 70 Views🌐 WEB

CVE-2020-35719: Reflected XSS in Quest Policy Authority 8.1.2.20

5 of 5AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 4
NVD	CVE-2020-35719	11 Jan 202103:15	–	nvd
RedhatCVE	CVE-2020-35719	22 May 202517:11	–	redhatcve
Prion	Cross site scripting	11 Jan 202103:15	–	prion
Cvelist	CVE-2020-35719	11 Jan 202102:55	–	cvelist

Nvd

Node

quest policy_authority_for_unified_communicationsMatch8.1.2.200

Source	Link
un4gi	www.un4gi.io/blog/multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications
clandestinelabs	www.clandestinelabs.io/security-advisories/advisory-multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications

Parameter	Position	Path	Description	CWE
added	query param	/WebCM/Applications/Search/index.jsp	Reflected XSS vulnerability allows remote code injection via a crafted link.	CWE-79

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

11 Jan 2021 03:15Current

6Medium risk

Vulners AI Score6

CVSS24.3

CVSS36.1

EPSS0.00375

CWE-79