342 matches found
Design/Logic Flaw
Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system...
CVE-2020-2218
The CVE-2020-2218 entry concerns Jenkins HP ALM Quality Center Plugin (versions 1.6 and earlier). The vulnerability arises because the plugin stores a password unencrypted in the global configuration file on the Jenkins master, specifically in org.jenkinsci.plugins.qc.QualityCenterIntegrationReco...
CVE-2020-2218
Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system...
CVE-2020-2218
Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system...
CVE-2020-2218: Insufficiently Protected Credentials
Jenkins HP ALM Quality Center Plugin 1.6 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system...
CVE-2019-19912
In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...
CVE-2019-19913
In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter...
Cross site scripting
In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...
CVE-2019-19912
Intland codeBeamer ALM
CVE-2019-19913
Intland codeBeamer ALM 9.5 and earlier is affected by a stored XSS vulnerability in the Trackers Title parameter. The root cause is improper handling/validation of this input, allowing injected scripts to execute in the context of the vulnerable page. Affected software: codeBeamer ALM 9.5 and ear...
CVE-2019-19913
In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter...
CVE-2019-19913: Improper Neutralization of Input During Web Page Generation
In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter...
CVE-2019-19912: Improper Neutralization of Input During Web Page Generation
In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...
CVE-2020-9344
Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations...
CVE-2020-9344
Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations...
Cross site scripting
Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations...
CVE-2020-9344
Jira Subversion ALM for Enterprise versions prior to 8.8.2 are vulnerable to reflected Cross-Site Scripting (XSS) at multiple locations. The root cause is a lack of proper validation of client-side data in the web application. Successful exploitation allows an attacker to execute arbitrary JavaSc...
CVE-2020-9344
Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations...
CVE-2020-9344: Improper Neutralization of Input During Web Page Generation
Subversion ALM for the enterprise before 8.8.2 allows reflected XSS at multiple locations...
PT-2020-20599
Name of the Vulnerable Software and Affected Versions Subversion ALM for the enterprise versions prior to 8.8.2 Description The issue allows for reflected XSS at multiple locations. Recommendations For versions prior to 8.8.2, update to version 8.8.2 or later to resolve the issue...