2 matches found
CVE-2020-12677: Improper Neutralization of Input During Web Page Generation
An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS. This affects 2018 - 2018.0 prior to 2018.0.3, 20...
6.1CVSS6.9AI score0.01908EPSS
SaveExploits0References2
PT-2020-13198
Name of the Vulnerable Software and Affected Versions Progress MOVEit Automation Web Admin versions 2018 through 2018.0 prior to 2018.0.3 Progress MOVEit Automation Web Admin versions 2018 SP1 through 2018.2 prior to 2018.2.3 Progress MOVEit Automation Web Admin versions 2018 SP2 through 2018.3...
6.1CVSS0.01908EPSS
SaveExploits0References10
20