EUVD-2020-20867

Malware in sbrugna...

EUVD-2020-20868

Malware in sbrugna...

EUVD-2018-10289

Malware in sbrugna...

CVE-2020-28408

The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard...

CVE-2020-28409

The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component e.g., a button when events such as click, hover, etc. occur...

Dundas BI server cross-site scripting vulnerability

Dundas BI server is a web-based server application. A cross-site scripting vulnerability exists in Dundas BI version 8.0.0.1001 and prior versions, which stems from allowing XSS attacks via HTML tags when creating or editing dashboards. No detailed vulnerability details are currently available...

CVE-2020-28409

The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component e.g., a button when events such as click, hover, etc. occur...

CVE-2020-28409

The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component e.g., a button when events such as click, hover, etc. occur...

CVE-2020-28408

The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard...

CVE-2020-28408

The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard...

Cross site scripting

The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard...

CVE-2020-28408

The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard...

CVE-2020-28408

Dundas BI server (version 8.0.0.1001 and prior) is affected by CVE-2020-28408 due to cross-site scripting via an HTML label when creating or editing a dashboard. The vulnerability is caused by XSS in the server-side handling of dashboard labels; impact details are described as an HTML-label based...

CVE-2020-28409

The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component e.g., a button when events such as click, hover, etc. occur...

CVE-2020-28409

The CVE-2020-28409 entry describes a reflected/in-page XSS in Dundas BI up to version 8.0.0.1001, triggered by adding a UI Component (for example, a button) and subsequent events such as click or hover. The vulnerability affects Dundas BI’s server-side handling when these events occur, enabling s...

CVE-2020-28409: Improper Neutralization of Input During Web Page Generation

The server in Dundas BI through 8.0.0.1001 allows XSS via addition of a Component e.g., a button when events such as click, hover, etc. occur...

CVE-2020-28408: Improper Neutralization of Input During Web Page Generation

The server in Dundas BI through 8.0.0.1001 allows XSS via an HTML label when creating or editing a dashboard...

PT-2020-17003

Name of the Vulnerable Software and Affected Versions Dundas BI versions through 8.0.0.1001 Description The issue allows for cross-site scripting XSS via an HTML label when creating or editing a dashboard. This occurs because the server in Dundas BI does not properly validate user input,...

PT-2020-17004

Name of the Vulnerable Software and Affected Versions Dundas BI versions through 8.0.0.1001 Description The issue allows XSS via addition of a Component, such as a button, when events like click or hover occur. Recommendations For versions through 8.0.0.1001, consider disabling the addition of...

CVE-2018-18569

The Dundas BI server before 5.0.1.1010 is vulnerable to a Server-Side Request Forgery attack, allowing an attacker to forge arbitrary requests with certain restrictions that will be executed on behalf of the attacker, via the viewUrl parameter of the "export the dashboard as an image" feature. Th...