CVE-2023-49572

A vulnerability has been discovered in VX Search Enterprise affecting version 10.2.14, and in Disk Pulse Enterprise 10.4.18 version, that could allow an attacker to execute persistent XSS through /setupodbc in odbcdatasource, odbcuser and odbcpassword parameters. This vulnerability could allow an...

PT-2024-13751

Name of the Vulnerable Software and Affected Versions VX Search Enterprise version 10.2.14 Description A vulnerability has been discovered that could allow an attacker to execute persistent XSS through the "/setup odbc" API endpoint in the odbc data source, odbc user, and odbc password parameters...