PT-2025-18760 · United Planet · Intrexx Portal Server

Name of the Vulnerable Software and Affected Versions: Intrexx Portal Server versions prior to 12.0.4 Description: The issue allows for the execution of unrequested JavaScript code in HTML, also known as Cross-Site Scripting XSS. This occurs due to susceptible Velocity-Scripts in the affected...

CVE-2025-47201

In Intrexx Portal Server before 12.0.4, multiple Velocity-Scripts are susceptible to the execution of unrequested JavaScript code in HTML, aka XSS...

CVE-2025-30092

Intrexx Portal Server 12.x = 12.0.2 and 11.x = 11.9.2 allows XSS in multiple Velocity scripts...

CVE-2025-26816

A vulnerability in Intrexx Portal Server 12.0.2 and earlier which was classified as problematic potentially allows users with particular permissions under certain conditions to see potentially sensitive data from a different user context...

CVE-2025-30092

Intrexx Portal Server 12.x = 12.0.2 and 11.x = 11.9.2 allows XSS in multiple Velocity scripts...

CVE-2025-26816

A vulnerability in Intrexx Portal Server 12.0.2 and earlier which was classified as problematic potentially allows users with particular permissions under certain conditions to see potentially sensitive data from a different user context...

Intrexx Portal Server 安全漏洞

Intrexx Portal Server is a cross-platform development environment from Intrexx Corporation. A security vulnerability exists in Intrexx Portal Server versions 12.0.2 and earlier and 11.9.2 and earlier that stems from a cross-site scripting issue with multiple Velocity scripts...

CVE-2025-26816

A vulnerability in Intrexx Portal Server 12.0.2 and earlier which was classified as problematic potentially allows users with particular permissions under certain conditions to see potentially sensitive data from a different user context...

Intrexx Portal Server 安全漏洞

Intrexx Portal Server is a cross-platform development environment from Intrexx Corporation. A security vulnerability exists in Intrexx Portal Server version 12.0.2 and earlier, which stems from the fact that under certain conditions, a user with certain privileges may be able to see sensitive dat...

CVE-2025-30092

CVE-2025-30092 affects Intrexx Portal Server versions 12.x up to 12.0.2 and 11.x up to 11.9.2, with a stored/reflected cross-site scripting (XSS) vulnerability in multiple Velocity scripts. The CVE entry lists a CVSSv3.1 base score of 6.1 (Medium) with network access and user interaction required...

CVE-2025-26816

A vulnerability in Intrexx Portal Server 12.0.2 and earlier which was classified as problematic potentially allows users with particular permissions under certain conditions to see potentially sensitive data from a different user context...

CVE-2025-26816

The CVE-2025-26816 affects Intrexx Portal Server 12.0.2 and earlier. Affected component is the portal server logic that, under certain conditions and for users with specific permissions, can disclose potentially sensitive data from another user context. The impact is confidentiality exposure (C=H...

CVE-2025-30092

Intrexx Portal Server 12.x = 12.0.2 and 11.x = 11.9.2 allows XSS in multiple Velocity scripts...

CVE-2025-30092

Intrexx Portal Server 12.x = 12.0.2 and 11.x = 11.9.2 allows XSS in multiple Velocity scripts...

CVE-2024-55554

Intrexx Portal Server before 12.0.2 allows XSS via a user-defined portlet...

Intrexx Portal Server 安全漏洞

Intrexx Portal Server is a cross-platform development environment from Intrexx Corporation. A security vulnerability exists in Intrexx Portal Server versions prior to 12.0.2. An attacker can exploit this vulnerability to perform cross-site scripting attacks...

CVE-2024-55554

Intrexx Portal Server before 12.0.2 allows XSS via a user-defined portlet. Affected component: portal server web UI; root cause: input in portlet not properly sanitized. Impact: cross-site scripting with network access, requiring user interaction; CVSSv3.1 base score 5.4 (MEDIUM). Remediation: up...

CVE-2024-55554

Intrexx Portal Server before 12.0.2 allows XSS via a user-defined portlet...

CVE-2024-55554

Intrexx Portal Server before 12.0.2 allows XSS via a user-defined portlet...

The vulnerability of the Web Server Authentication Required VPN-portal Clientless Secure Sockets Layer (SSL) micro-programming system of Cisco Adaptive Security Appliance (ASA) allows a attacker to carry out XSS attacks.

The vulnerability of the Web Server Authentication Required VPN-portal Clientless Secure Sockets Layer SSL micro-programming system of Cisco Adaptive Security Appliance ASA exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability can allow a malicio...