CVE-2021-26787

A cross site scripting XSS vulnerability in Genesys Workforce Management 8.5.214.20 can occur during record deletion via the Time-off parameter...

Malicious code in genesys-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2025-4174 Malicious code in genesys-lib (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2019-17176

Genesys PureEngage Digital eServices 8.1.x allows XSS via HtmlChatPanel.jsp or HtmlChatFrameSet.jsp ActionColor, ClientNickNameColor, Email, email, or emailaddress parameter...

Missing Authentication for Critical Function

Overview rasa-pro is a State-of-the-art open-core Conversational AI framework for Enterprises that natively leverages generative AI for effortless assistant development. Affected versions of this package are vulnerable to Missing Authentication for Critical Function in the voice connector APIs fo...

Malicious code in genesys-richmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0961665538e0d2d003567292d856ba063d66f2dc4ffa8cd8fbf50ea8e65a2645 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2025-1362 Malicious code in genesys-richmedia (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0961665538e0d2d003567292d856ba063d66f2dc4ffa8cd8fbf50ea8e65a2645 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

genesys-gmg.com.br Cross Site Scripting vulnerability OBB-3927613

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fedora 38 : fwupd (2023-48c43df788)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2023-48c43df788 advisory. This release adds the following features: Add a launchd agent for macOS Add a new security attribute for BIOS capsule updates to be enabled Add functionality...

CVE-2023-23208

Genesys Administrator Extension GAX before 9.0.105.15 is vulnerable to Cross Site Scripting XSS via the Business Structure page of the iWD plugin, aka GAX-11261...

CVE-2023-23208

Genesys Administrator Extension GAX before 9.0.105.15 is vulnerable to Cross Site Scripting XSS via the Business Structure page of the iWD plugin, aka GAX-11261...

CVE-2023-23208

Genesys Administrator Extension GAX before 9.0.105.15 is vulnerable to Cross Site Scripting XSS via the Business Structure page of the iWD plugin, aka GAX-11261...

Cross site scripting

Genesys Administrator Extension GAX before 9.0.105.15 is vulnerable to Cross Site Scripting XSS via the Business Structure page of the iWD plugin, aka GAX-11261...

PT-2023-18876 · Genesys · Genesys Administrator Extension

Name of the Vulnerable Software and Affected Versions: Genesys Administrator Extension GAX versions prior to 9.0.105.15 Description: The issue is related to Cross Site Scripting XSS via the Business Structure page of the iWD plugin. This allows for potential malicious script execution. No...

CVE-2023-23208

Genesys Administrator Extension GAX before 9.0.105.15 is vulnerable to Cross Site Scripting XSS via the Business Structure page of the iWD plugin, aka GAX-11261...

CVE-2023-23208

Genesys Administrator Extension GAX before 9.0.105.15 is vulnerable to Cross Site Scripting XSS via the Business Structure page of the iWD plugin, aka GAX-11261...

Genesys Administrator Extension Cross-Site Scripting Vulnerability

Genesys Administrator Extension is a web-based user interaction layer component from Genesys, Inc. A security vulnerability exists in Genesys Administrator Extension GAX versions prior to 9.0.105.15, which stems from the iWD plugin's Business Architecture page GAX-11261 being susceptible to...

CVE-2023-23208

CVE-2023-23208 affects Genesys Administrator Extension (GAX) versions prior to 9.0.105.15, with a Cross-Site Scripting (XSS) vulnerability on the iWD plugin’s Business Structure page (GAX-11261). The available descriptions identify the flaw but do not provide concrete exploit details. The stated ...

CVE-2023-29930

An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via the login crednetials to the TFTP server configuration page...

Code injection

An issue was found in Genesys CIC Polycom phone provisioning TFTP Server all version allows a remote attacker to execute arbitrary code via the login crednetials to the TFTP server configuration page...