PT-2021-19511

Name of the Vulnerable Software and Affected Versions Directum version 5.8.2 Description The issue allows for XSS via the HTTP User-Agent header in the "Settings.aspx?view=About" page. Recommendations For Directum version 5.8.2, as a temporary workaround, consider restricting access to the...

CVE-2021-31794: Improper Neutralization of Input During Web Page Generation

Settings.aspx?view=About in Directum 5.8.2 allows XSS via the HTTP User-Agent header...