CVE-2018-19818

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Contacts.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19818

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Contacts.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19816

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/categorytree/ChooseCategory.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19820

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Roles.jsp" has reflected XSS via the ConnPoolName parameter...

Cross site scripting

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "GroupRessourceAdmin.jsp" has reflected XSS via the ConnPoolName parameter...

Cross site scripting

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Rights.jsp" has reflected XSS via the ConnPoolName parameter...

Cross site scripting

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "EditCurrentUser.jsp" has reflected XSS via the GroupId and ConnPoolName parameters...

Cross site scripting

XSS exists in InfoVista VistaPortal SE Version 5.1 build 51029. VPortal/mgtconsole/RolePermissions.jsp has reflected XSS via the ConnPoolName parameter...

Cross site scripting

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "Users.jsp" has reflected XSS via the ConnPoolName parameter...

Cross site scripting

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Subscribers.jsp" has reflected XSS via the ConnPoolName or GroupId parameter...

Cross site scripting

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/categorytree/ChooseCategory.jsp" has reflected XSS via the ConnPoolName parameter...

Cross site scripting

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/GroupMove.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter...

CVE-2018-19766

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "GroupRessourceAdmin.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19773

The CVE-2018-19773 entry concerns a reflected Cross Site Scripting vulnerability in Infovista VistaPortal SE 5.1 (build 51029), specifically on the EditCurrentUser.jsp page where GroupId and ConnPoolName can reflect attacker-controlled input. Multiple connected sources verify the issue and descri...

CVE-2018-19812

The CVE-2018-19812 issue affects InfoVista VistaPortal SE 5.1 (build 51029). The page /VPortal/mgtconsole/SubFolderPackages.jsp is vulnerable to reflected XSS via the GroupId parameter. CVSS metrics indicate MEDIUM severity (CVSS v2: 4.3; CVSS v3: 6.1) with network attack vector, no privileges re...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07223)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the EditCurrentPresentSpace.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary code with the help of th...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07232)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the PresentSpace.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web script or HTML with the help of...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07215)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Contacts.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web script or HTM...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07225)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the PresentSpace.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web script or HTML with the help of...

VistaPortal SE 5.1 Cross Site Scripting

Complete list: CVE-2018-19649, CVE-2018-19765, CVE-2018-19766, CVE-2018-19767, CVE-2018-19768, CVE-2018-19769, CVE-2018-19770, CVE-2018-19771, CVE-2018-19772, CVE-2018-19773, CVE-2018-19774, CVE-2018-19775, CVE-2018-19809, CVE-2018-19810, CVE-2018-19811, CVE-2018-19812, CVE-2018-19813,...