CVE-2021-27503

Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application encrypts on the application layer of the communication protocol between the Ypsomed mylife App and mylife Cloud credentials based on...

CVE-2022-27503

Cross-site Scripting XSS vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9...

CVE-2022-27503

Cross-site Scripting XSS vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9...

CVE-2022-27503

CVE-2022-27503 is a reflected Cross-Site Scripting (XSS) vulnerability in Citrix StoreFront when configured with SAML authentication. The issue affects Citrix StoreFront 1912 LTSR up to CU4 (1912.0.4000) and StoreFront 3.12 up to CU8 (3.12.8000). An attacker who has a valid session could inject a...

CVE-2022-27503

Cross-site Scripting XSS vulnerability in Citrix StoreFront affects version 1912 before CU5 and version 3.12 before CU9...

Citrix StoreFront Security Bulletin for CVE-2022-27503

A reflected cross-site scripting XSS issue has been discovered in Citrix StoreFront when it is configured to use SAML authentication. If exploited, this issue would allow an attacker to execute client-side JavaScript in the same context as a legitimate user. This issue has the following identifie...

CVE-2021-27503

creationtimestamp| type| source ---|---|--- 2021-08-03 00:27:55+00:00| seen| https://t.me/cibsecurity/26710...

CVE-2021-27503

Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed mylife Cloud: All versions prior to 1.7.2, Ypsomed mylife App: All versions prior to 1.7.5,The application encrypts on the application layer of the communication protocol between the Ypsomed mylife App and mylife Cloud credentials based on...

CVE-2021-27503

CVE-2021-27503 affects Ypsomed mylife Cloud (all versions before 1.7.2) and mylife App (before 1.7.5). The root cause is encryption at the application layer based on hard-coded secrets in the client–server protocol, which can enable man-in-the-middle tampering of messages. The Red Hat and other s...