6885 matches found
Apache Superset Cross-Site Scripting Vulnerability
Apache Superset up is an open source application from the Apache Foundation that provides a design for horizontal scaling in large distributed environments. A security vulnerability exists in Apache Superset 0.38.0 and earlier versions, which can be exploited by an attacker to inject javascript...
CVE-2021-20351
CVE-2021-20351 describes a cross-site scripting vulnerability in IBM Engineering products, allowing attackers to inject arbitrary JavaScript via the Web UI and potentially disclose credentials within a trusted session. The issue affects multiple IBM Engineering products in the Engineering Lifecyc...
PT-2021-13903
Name of the Vulnerable Software and Affected Versions: IBM Engineering products affected versions not specified Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a...
Apache Ambari Cross-Site Scripting Vulnerability (CNVD-2021-14760)
Apache Ambari is an open source Apache application. Provides software developed to configure, manage and monitor Apache Hadoop clusters to simplify Hadoop management. A cross-site scripting vulnerability exists in Apache Ambari 2.7.4, which stems from the input in the view is not effectively...
PT-2021-12203
Name of the Vulnerable Software and Affected Versions IBM Engineering products affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a truste...
PT-2021-12201
Name of the Vulnerable Software and Affected Versions IBM Engineering products affected versions not specified Description The issue allows users to embed arbitrary JavaScript code in the Web UI, potentially altering the intended functionality and leading to credentials disclosure within a truste...
CVE-2021-3010
There are multiple persistent cross-site scripting XSS vulnerabilities in the web interface of OpenText Content Server Version 20.3. The application allows a remote attacker to introduce arbitrary JavaScript by crafting malicious form values that are later not sanitized...
CVE-2020-4856
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190459...
CVE-2020-4866
IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190742...
CVE-2020-4863
IBM Engineering products are vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190566...
Appspace Cross-Site Scripting Vulnerability
Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. A cross-site scripting vulnerability exists in Appspace version 6.2.4, which stems from the groups section of the network tab not adequately...
Persistent XSS through Team Calendar in Confluence Server - CVE-2020-29444
Affected versions of Team Calendar in Confluence Server allow attackers to inject arbitrary HTML or Javascript via a Cross Site Scripting vulnerability in admin global setting parameters. h3. Affected versions: 7.11.0 h3. Fixed version: 7.11.0 This vulnerability is attributed to Stefano...
Appspace Cross-Site Script Vulnerabilities
Appspace is an application from the US-based Appspace Inc. Provides built-in content strategies to easily implement and execute team communication programs. A cross-site scripting vulnerability exists in Appspace version 6.2.4, which stems from the groups section of the network tab not adequately...
PT-2021-13969
Name of the Vulnerable Software and Affected Versions: IBM Maximo for Civil Infrastructure version 7.6.2 Description: The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure within a trusted...
PT-2021-12240
Name of the Vulnerable Software and Affected Versions IBM Jazz Reporting Service versions 6.0.6.1, 7.0, 7.0.1, and 7.0.2 Description This issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure with...
PT-2021-11971
Name of the Vulnerable Software and Affected Versions: Atlassian Jira Server and Data Center versions prior to 8.5.11 Atlassian Jira Server and Data Center versions 8.6.0 through 8.13.3 Atlassian Jira Server and Data Center versions 8.14.0 through 8.14.x Description: The issue allows remote...
CVE-2020-4768
IBM Case Manager 5.2 and 5.3 and IBM Business Automation Workflow 18.0, 19.0, and 20.0 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure...
CVE-2020-35125
A cross-site scripting XSS vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript via mauticreturn a different attack method than CVE-2020-35124, but also related to the Referer concept...
Redwood Report2Web Cross-Site Scripting Vulnerability
Redwood Report2Web is a web platform from Redwood Corporation that provides users with automated report generation capabilities. A cross-site scripting vulnerability exists in Redwood Report2Web versions 4.3.4.5 and 4.5.3, which stems from a login panel XSS issue that can be exploited by remote...
