Infovista VistaPortal SE '/VPortal/mgtconsole/Roles.jsp' page cross-site scripting vulnerability

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Roles.jsp' page in Infovista VistaPortal SE version 5.1 build 51029. A remote attacker can exploit this vulnerability to inject arbitrary web script or...