CVE-2021-31794

CVE-2021-31794 is a cross-site scripting vulnerability in Directum 5.8.2, where an attacker can trigger XSS through the HTTP User-Agent header in the Settings.aspx?view=About page. The vulnerability is described across multiple connected records as affecting Directum version 5.8.2 and enabling sc...

CVE-2021-31794: Improper Neutralization of Input During Web Page Generation

Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header...

PT-2021-19511

Name of the Vulnerable Software and Affected Versions Directum version 5.8.2 Description The issue allows for XSS via the HTTP User-Agent header in the "Settings.aspx?view=About" page. Recommendations For Directum version 5.8.2, as a temporary workaround, consider restricting access to the...

Directum 跨站脚本漏洞

Directum is an application system of the Russian company Directum. An intelligent digital process and documentation system. A cross-site scripting vulnerability exists in Settings.aspx?view=About in Directum version 5.8.2. An attacker can exploit this vulnerability via the HTTP User-Agent header ...

research

Public CVE | CVE Number | Produc...

The vulnerability of the web access module of the DIRECTUM electronic document management system allows a perpetrator to execute arbitrary JavaScript code.

The vulnerability of the web access module of the DIRECTUM electronic document management system is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary JavaScript code remotely...

The vulnerability of the web access module of the DIRECTUM electronic document management system allows a hacker to obtain the name of the last authorized user.

The vulnerability of the web access module of the DIRECTUM electronic document management system is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor to obtain the name of the last authorized user who accessed the system remotely...

PT-2019-2410

Name of the Vulnerable Software and Affected Versions DIRECTUM affected versions not specified Description The issue is related to insufficient protection of the web page structure in the web access module of the DIRECTUM electronic document management system. This could allow a remote attacker t...

PT-2019-2409

Name of the Vulnerable Software and Affected Versions DIRECTUM affected versions not specified Description The issue is related to a module vulnerability in the web access system of DIRECTUM, which is connected to weaknesses in the authentication procedure. This could allow a remote attacker to...