PT-2018-15105

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it affects the "/VPortal/mgtconsole/Subscribers.jsp" page, where reflected XSS can occur via the ConnPoolName or...

CVE-2018-19819: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Rights.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19821: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/SecurityPolicies.jsp" has reflected XSS via the ConnPoolName parameter...

PT-2018-15089

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it affects the "PresentSpace.jsp" page, where reflected XSS is possible via the GroupId and ConnPoolName parameters...

CVE-2018-19811: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Import.jsp" has reflected XSS via the ConnPoolName parameter...

PT-2018-15114

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it affects the "/VPortal/mgtconsole/SharedCriteria.jsp" page, where reflected XSS can occur via the ConnPoolName or...

PT-2018-15110

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it affects the "/VPortal/mgtconsole/Contacts.jsp" page, where a reflected XSS vulnerability exists via the ConnPoolNa...

PT-2018-15088

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it affects the "EditCurrentUser.jsp" page, where reflected XSS is possible via the GroupId and ConnPoolName parameter...

PT-2018-15081

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "GroupRessourceAdmin.jsp" page, where reflected XSS is possible via the ConnPoolName parameter. Recommendations For...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07219)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Subscriptions.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the help of the The...

Infovista VistaPortal SE '/VPortal/mgtconsole/Roles.jsp' page cross-site scripting vulnerability

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Roles.jsp' page in Infovista VistaPortal SE version 5.1 build 51029. A remote attacker can exploit this vulnerability to inject arbitrary web script or...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07218)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Subscribers.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the help of the The...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07216)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/UserPopupAddNewProp.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07229)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the UserProperties.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the 'ConnPoolName' parameter to inject arbitrary...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07215)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Contacts.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web script or HTM...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07231)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the GroupRessourceAdmin.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the 'ConnPoolName' parameter to inject...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07217)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/categorytree/ChooseCategory.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote An attacker can inject...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07214)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/AdminAuthorizationFrame.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to A remote attacker c...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07228)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the Variables.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by remote attackers to inject arbitrary web script or HTML with the help of the...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07226)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the /VPortal/mgtconsole/GroupCopy.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary Web code with the...