Lucene search
+L

7 matches found

osv_cve
osv_cve
•added 2019/01/23 5:29 p.m.•20 views

CVE-2018-15614

A vulnerability in the one-x Portal component of IP Office could allow an authenticated user to perform stored cross site scripting attacks via fields in the Conference Scheduler Service that could affect other application users. Affected versions of IP Office include 10.0 through 10.1 SP3 and 11...

5.4CVSS5.3AI score0.00621EPSS
SaveExploits0References1
Prion
Prion
•added 2019/01/23 5:29 p.m.•27 views

Cross site scripting

A vulnerability in the one-x Portal component of IP Office could allow an authenticated user to perform stored cross site scripting attacks via fields in the Conference Scheduler Service that could affect other application users. Affected versions of IP Office include 10.0 through 10.1 SP3 and 11...

3.5CVSS5.1AI score0.00621EPSS
SaveExploits0References1Affected Software1
NVD
NVD
•added 2019/01/23 5:29 p.m.•30 views

CVE-2018-15614

A vulnerability in the one-x Portal component of IP Office could allow an authenticated user to perform stored cross site scripting attacks via fields in the Conference Scheduler Service that could affect other application users. Affected versions of IP Office include 10.0 through 10.1 SP3 and 11...

6.8CVSS6.3AI score0.00621EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2019/01/23 5:00 p.m.•33 views

CVE-2018-15614 IP Office one-X Portal XSS

A vulnerability in the one-x Portal component of IP Office could allow an authenticated user to perform stored cross site scripting attacks via fields in the Conference Scheduler Service that could affect other application users. Affected versions of IP Office include 10.0 through 10.1 SP3 and 11...

6.8CVSS6.3AI score0.00621EPSS
SaveExploits0References1
CVE
CVE
•added 2019/01/23 5:00 p.m.•74 views

CVE-2018-15614

The CVE-2018-15614 entry concerns a stored cross-site scripting (XSS) vulnerability in the one-X Portal component of Avaya IP Office. The issue allows an authenticated user to inject XSS via fields in the Conference Scheduler Service, potentially affecting other application users. Affected versio...

6.8CVSS5.4AI score0.00621EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/23 12:00 a.m.•13 views

CVE-2018-15614: Improper Neutralization of Input During Web Page Generation

A vulnerability in the one-x Portal component of IP Office could allow an authenticated user to perform stored cross site scripting attacks via fields in the Conference Scheduler Service that could affect other application users. Affected versions of IP Office include 10.0 through 10.1 SP3 and 11...

6.8CVSS5AI score0.00621EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/01/23 12:00 a.m.•7 views

PT-2019-9134

Name of the Vulnerable Software and Affected Versions IP Office versions 10.0 through 10.1 SP3 IP Office versions 11.0 prior to 11.0 SP1 Description A stored cross site scripting issue in the one-x Portal component of IP Office could allow an authenticated user to perform attacks via fields in th...

6.8CVSS0.00621EPSS
SaveExploits0References3
Rows per page
Query Builder