CVE-2022-26962

Italtel NFV 11.1.2-20210318 contains a Multiple Stored XSS vulnerability in the NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp page (specifically via the operation=list&object=announcementAS query). The vulnerable parameters are name , username , and mrfAnnouncementName . A malicious authentic...

EUVD-2022-56058

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...

CVE-2024-28803

Cross-site scripting XSS vulnerability in Italtel S.p.A. i-MCS NFV v.12.1.0-20211215 allows unauthenticated remote attackers to inject arbitrary web script or HTML into HTTP/POST parameter...