CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

CNVD•added 2020/10/19 12:0 a.m.•1 views

SysAid Technologies SysAid Cross-Site Scripting Vulnerability

SysAid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies, Israel. A cross-site scripting vulnerability exists in SysAid Technologies SysAid version 20.1.11b26. The vulnerability stems from a lack of proper validation of client-side data by the web...

6.1CVSS6.4AI score0.00955EPSS

Exploits1References1

OSV•added 2020/10/02 9:15 a.m.•3 views

CVE-2020-13168

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter...

6.1CVSS6.4AI score0.00955EPSS

Exploits1References2

NVD•added 2020/10/02 9:15 a.m.•8 views

CVE-2020-13168

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter...

6.1CVSS0.00955EPSS

Exploits1References2

CVE•added 2020/10/02 8:34 a.m.•38 views

CVE-2020-13168

CVE-2020-13168 affects SysAid 20.1.11b26 and enables a reflected XSS via the ForgotPassword.jsp?accountid parameter. The CNVD entry notes that the vulnerability can allow execution of client-side code; other sources corroborate the reflected XSS characterization. No remediation details are provid...

6.1CVSS5.9AI score0.00955EPSS

Exploits1References2Affected Software2