Cross site request forgery (csrf)

2018-03-1223:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

22.9%

Remedy Mid Tier in BMC Remedy AR System 9.1 allows XSS via the ATTKey parameter in an arsys/servlet/AttachServlet request.

CPENameOperatorVersion
remedy_action_request_systemle9.1

CPE	Name	Operator	Version
	remedy_action_request_system	le	9.1

References

communities.bmc.com/thread/164169

0.001 Low

EPSS

Percentile

22.9%

Related for PRION:CVE-2017-18228