19 matches found
EUVD-2020-29781
Malware in sbrugna...
CVE-2020-8952
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
CVE-2020-8951
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager Configuration Parameter Translation page...
CVE-2020-8952
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
CVE-2020-8951
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager Configuration Parameter Translation page...
CVE-2020-8952
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
CVE-2020-8951
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager Configuration Parameter Translation page...
CVE-2020-8952
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
CVE-2020-8951
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager Configuration Parameter Translation page...
Design/Logic Flaw
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
Design/Logic Flaw
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager Configuration Parameter Translation page...
CVE-2020-8951
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager Configuration Parameter Translation page...
CVE-2020-8951
CVE-2020-8951 affects Fiserv Accurate Reconciliation 2.19.0, where a vulnerability exists in the Configuration Manager’s Source/Destination (Configuration Parameter Translation) fields that can be manipulated to perform cross‑site scripting (XSS). The issue is fixed in version 3.0.0 or higher. Th...
CVE-2020-8952
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
CVE-2020-8952
CVE-2020-8952 affects Fiserv Accurate Reconciliation version 2.19.0. The vulnerability is an XSS issue exposed via the logout.jsp timeOut parameter. The issue is mitigated by upgrading to version 3.0.0 or higher. Public references in the connected documents corroborate the vendor/Red Hat/NVD entr...
CVE-2020-8952: Improper Neutralization of Input During Web Page Generation
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
CVE-2020-8951: Improper Neutralization of Input During Web Page Generation
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the Source or Destination field of the Configuration Manager Configuration Parameter Translation page...
PT-2020-20389
Name of the Vulnerable Software and Affected Versions Fiserv Accurate Reconciliation versions prior to 3.0.0 Description The issue allows for XSS via the Source or Destination field of the Configuration Manager Configuration Parameter Translation page. Recommendations For versions prior to 3.0.0,...
PT-2020-20390
Name of the Vulnerable Software and Affected Versions Fiserv Accurate Reconciliation versions prior to 3.0.0 Description The issue allows for cross-site scripting XSS attacks via the timeOut parameter in the logout.jsp endpoint. This could potentially lead to malicious script execution on the...