CVE-2018-19649: Improper Neutralization of Input During Web Page Generation

XSS exists in InfoVista VistaPortal SE Version 5.1 build 51029. VPortal/mgtconsole/RolePermissions.jsp has reflected XSS via the ConnPoolName parameter...

PT-2018-15028

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to a reflected XSS that exists in the VPortal/mgtconsole/RolePermissions.jsp endpoint, specifically via the ConnPoolName parameter. This allows for potential...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07235)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the RolePermissions.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the 'ConnPoolName' parameter to inject arbitrar...