CVE-2018-19822: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/SharedCriteria.jsp" has reflected XSS via the ConnPoolName or GroupId parameter...

PT-2018-15102

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "/VPortal/mgtconsole/GroupMove.jsp" page, where reflected XSS can occur via the ConnPoolName, GroupId, or type parameter...

CVE-2018-19821: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/SecurityPolicies.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19820: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Roles.jsp" has reflected XSS via the ConnPoolName parameter...

PT-2018-15088

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it affects the "EditCurrentUser.jsp" page, where reflected XSS is possible via the GroupId and ConnPoolName parameter...

PT-2018-15028

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to a reflected XSS that exists in the VPortal/mgtconsole/RolePermissions.jsp endpoint, specifically via the ConnPoolName parameter. This allows for potential...

PT-2018-15085

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "Users.jsp" page, where reflected XSS is possible via the ConnPoolName parameter. Recommendations For InfoVista VistaPort...

CVE-2018-19649: Improper Neutralization of Input During Web Page Generation

XSS exists in InfoVista VistaPortal SE Version 5.1 build 51029. VPortal/mgtconsole/RolePermissions.jsp has reflected XSS via the ConnPoolName parameter...

PT-2018-15083

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "SubPagePackages.jsp" page, where reflected XSS is possible via the ConnPoolName and GroupId parameters. Recommendations...

PT-2018-15106

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "/VPortal/mgtconsole/Subscriptions.jsp" page, where reflected XSS can occur via the ConnPoolName or GroupId parameter...

PT-2018-15110

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it affects the "/VPortal/mgtconsole/Contacts.jsp" page, where a reflected XSS vulnerability exists via the ConnPoolNa...

PT-2018-15084

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it is a reflected XSS vulnerability via the ConnPoolName parameter in the "UserProperties.jsp" page. Recommendations...

PT-2018-15082

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "PresentSpace.jsp" page, where reflected XSS is possible via the ConnPoolName and GroupId parameters. Recommendations For...

PT-2018-15090

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "Variables.jsp" page, where reflected XSS is possible via the ConnPoolName and GroupId parameters. Recommendations For...

PT-2018-15112

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "/VPortal/mgtconsole/Roles.jsp" page, where reflected XSS is possible via the ConnPoolName parameter. Recommendations For...

PT-2018-15109

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description A Cross Site Scripting issue exists, allowing reflected XSS via the ConnPoolName or GroupId parameter in the "/VPortal/mgtconsole/AdminAuthorisationFrame.jsp" API endpoint...

CVE-2018-19810: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/GroupMove.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter...

CVE-2018-19811: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Import.jsp" has reflected XSS via the ConnPoolName parameter...

PT-2018-15087

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "EditCurrentPresentSpace.jsp" page, where reflected XSS is possible via the ConnPoolName, GroupId, and ParentId parameter...

PT-2018-15114

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it affects the "/VPortal/mgtconsole/SharedCriteria.jsp" page, where reflected XSS can occur via the ConnPoolName or...