Cross site scripting

2024-01-1304:15:00

PRIOn knowledge base

www.prio-n.com

qstar archive

xss

vulnerability

qnme-ajax

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.3%

JSON

QStar Archive Solutions Release RELEASE_3-0 Build 7 Patch 0 was discovered to contain a DOM Based Reflected Cross Site Scripting (XSS) vulnerability within the component qnme-ajax?method=tree_level.

CPENameOperatorVersion
archive_storage_managereq30 build7patch0

CPE	Name	Operator	Version
	archive_storage_manager	eq	30 build7patch0

References

github.com/Oracle-Security/CVEs/blob/main/QStar%20Archive%20Solutions/CVE-2023-51063.md