IBM BigFix Platform Cross-Site Scripting Vulnerability (CNVD-2018-08995)

IBM BigFix Platform is a dynamic integrated messaging content-driven and management system multi-technology platform from IBM in the U.S. The BigFix Console is one of the console components. A cross-site scripting vulnerability exists in the BigFix Console component and the BigFix Relay Diagnosti...

PT-2018-12686

Name of the Vulnerable Software and Affected Versions IBM BigFix Platform versions 9.2 through 9.5 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted session...

CVE-2017-1750: Improper Neutralization of Input During Web Page Generation

IBM Jazz Reporting Service JRS 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted...

IBM Cognos Business Intelligence Cross-Site Scripting Vulnerability (CNVD-2018-08270)

IBM Cognos Business Intelligence BI is a suite of business intelligence software from IBM in the United States. The software includes reports, dashboards and scorecards, and can assist companies in adjusting their decisions by analyzing key factors and key stakeholders. A cross-site scripting...

CVE-2018-5228: Improper Neutralization of Input During Web Page Generation

The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...

XSS through header injection in the /browse/~raw resource - CVE-2018-5228

The /browse/raw resource in Atlassian Fisheye and Crucible before version 4.5.3 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the handling of response headers...

PT-2018-5725

Name of the Vulnerable Software and Affected Versions: IBM Cognos Business Intelligence versions 10.2 through 10.2.2 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

CVE-2018-1000163

Floodlight web console contains a Cross Site Scripting (XSS) flaw in version 1.2 and earlier. The vulnerability allows JavaScript injections when a victim browses the web console. Connected sources corroborate the XSS description but do not provide concrete exploit details, affected file paths, o...

CVE-2018-1000163

Floodlight version 1.2 and earlier contains a Cross Site Scripting XSS vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console...

CVE-2018-1000163: Improper Neutralization of Input During Web Page Generation

Floodlight version 1.2 and earlier contains a Cross Site Scripting XSS vulnerability in the web console that can result in javascript injections into the web page. This attack appears to be exploitable via the victim browsing the web console...

PT-2018-9334

Name of the Vulnerable Software and Affected Versions Floodlight versions 1.2 and earlier Description The issue is related to a Cross Site Scripting XSS vulnerability in the web console, which can lead to javascript injections into the web page. This can be exploited when the victim browses the w...

CVE-2017-18102: Improper Neutralization of Input During Web Page Generation

The wiki markup component of atlassian-renderer from version 8.0.0 before version 8.0.22 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in nested wiki markup...

PT-2018-6590

Name of the Vulnerable Software and Affected Versions: IBM DOORS Next Generation DNG/RRC versions 5.0 through 6.0.5 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...

CVE-2017-13678

Stored XSS vulnerability in the Symantec Advanced Secure Gateway ASG and ProxySG management consoles. A malicious appliance administrator can inject arbitrary JavaScript code in the management console web client application...

PT-2018-5591

Name of the Vulnerable Software and Affected Versions: Symantec Advanced Secure Gateway ASG and ProxySG affected versions not specified Description: The issue concerns a Stored XSS vulnerability in the management consoles of Symantec Advanced Secure Gateway ASG and ProxySG. This allows a maliciou...

Cross site scripting

Various administrative application link resources in Atlassian Application Links before version 5.4.4 allow remote attackers with administration rights to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the display url of a configured application link...

XSS in the agile wallboard gadget through quick filter names - CVE-2017-18100

The agile wallboard gadget in Atlassian Jira before version 7.8.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the name of quick filters. h3. Workaround Disable the gadget. - Navigate to Administration Add-ons Manage add-ons and se...

WP Live Chat Support Cross-Site Scripting Vulnerability

WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language, which supports setting up personal blog sites on servers running PHP and MySQL.WP Live Chat Support is one of the components that supports live chat. A cross-site scripting vulnerability exists...

PT-2018-16818

Name of the Vulnerable Software and Affected Versions Atlassian Application Links version 5.4.3 and earlier Description The issue allows remote attackers with administration rights to inject arbitrary HTML or JavaScript via a cross site scripting XSS vulnerability in the display url of a configur...

IBM WebSphere Portal Cross-Site Scripting Vulnerability (CNVD-2018-08589)

IBM WebSphere Portal is a suite of enterprise portal software from IBM. The software creates a platform that connects an organization internally and externally, allowing employees, customers and suppliers to access internal data through the platform. A cross-site scripting vulnerability exists in...