PT-2018-15109

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description A Cross Site Scripting issue exists, allowing reflected XSS via the ConnPoolName or GroupId parameter in the "/VPortal/mgtconsole/AdminAuthorisationFrame.jsp" API endpoint...

CVE-2018-19817: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/AdminAuthorisationFrame.jsp" has reflected XSS via the ConnPoolName or GroupId parameter...