Design/Logic Flaw

2020-10-0209:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

44.8%

JSON

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.

CPENameOperatorVersion
sysaid_on-premiseseq5.0
sysaid_on-premiseseq5.5.06
sysaid_on-premiseseq5.6
sysaid_on-premiseseq6.0.9
sysaid_on-premiseseq6.5
sysaid_on-premiseseq7.0
sysaid_on-premiseseq7.5
sysaid_on-premiseseq8.0
sysaid_on-premiseseq8.1
sysaid_on-premiseseq8.5

Name	Operator	Version
sysaid_on-premises	eq	5.0
sysaid_on-premises	eq	5.5.06
sysaid_on-premises	eq	5.6
sysaid_on-premises	eq	6.0.9
sysaid_on-premises	eq	6.5
sysaid_on-premises	eq	7.0
sysaid_on-premises	eq	7.5
sysaid_on-premises	eq	8.0
sysaid_on-premises	eq	8.1
sysaid_on-premises	eq	8.5