Lucene search
+L

7 matches found

NVD
NVD
•added 2021/12/15 7:15 a.m.•27 views

CVE-2021-36450

Verint Workforce Optimization WFO 15.2.8.10048 allows XSS via the control/mynotifications NEWUINAV parameter...

6.1CVSS0.64294EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2021/12/15 7:15 a.m.•12 views

CVE-2021-36450

Verint Workforce Optimization WFO 15.2.8.10048 allows XSS via the control/mynotifications NEWUINAV parameter...

6.1CVSS6.4AI score0.64294EPSS
SaveExploits1References6
Prion
Prion
•added 2021/12/15 7:15 a.m.•28 views

Cross site scripting

Verint Workforce Optimization WFO 15.2.8.10048 allows XSS via the control/mynotifications NEWUINAV parameter...

4.3CVSS5.9AI score0.64294EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2021/12/15 6:55 a.m.•42 views

CVE-2021-36450

Verint Workforce Optimization WFO 15.2.8.10048 allows XSS via the control/mynotifications NEWUINAV parameter...

6.1AI score0.64294EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/12/15 12:00 a.m.•5 views

PT-2021-21272

Name of the Vulnerable Software and Affected Versions Verint Workforce Optimization WFO version 15.2.8.10048 Description The issue allows for cross-site scripting XSS attacks. This is possible due to the NEWUINAV parameter in the "control/my notifications" API endpoint. Recommendations For versio...

6.1CVSS0.64294EPSS
SaveExploits1References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•10 views

CVE-2021-36450: Improper Neutralization of Input During Web Page Generation

Verint Workforce Optimization WFO 15.2.8.10048 allows XSS via the control/mynotifications NEWUINAV parameter...

6.1CVSS5.8AI score0.64294EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2021/12/15 12:00 a.m.•22 views

Verint Systems Verint Workforce Optimization 跨站脚本漏洞

Verint Systems Verint Workforce Optimization WFO is a workforce performance management solution from Verint Systems, Inc. A cross-site scripting vulnerability exists in version 8.10048, which stems from a lack of data validation filtering of user-supplied data and output. An attacker could exploi...

6.1CVSS5.1AI score0.64294EPSS
SaveExploits1References4
Rows per page
Query Builder