Lucene search
+L

6 matches found

attackerkb
attackerkb
•added 2021/11/30 12:15 p.m.•16 views

CVE-2021-42118

Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 via the Structure Component allows an authenticated remote attacker with Object Modification privileges to inject arbitrary HTML and JavaScript code in an object...

8.1CVSS6.3AI score0.00681EPSS
SaveExploits0References2
NVD
NVD
•added 2021/11/30 12:15 p.m.•32 views

CVE-2021-42118

Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 via the Structure Component allows an authenticated remote attacker with Object Modification privileges to inject arbitrary HTML and JavaScript code in an object...

8.1CVSS0.00681EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2021/11/30 12:15 p.m.•17 views

CVE-2021-42118

Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 via the Structure Component allows an authenticated remote attacker with Object Modification privileges to inject arbitrary HTML and JavaScript code in an object...

5.4CVSS6AI score0.00681EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/11/30 11:28 a.m.•46 views

CVE-2021-42118 Stored XSS in TopEase

Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 via the Structure Component allows an authenticated remote attacker with Object Modification privileges to inject arbitrary HTML and JavaScript code in an object...

8.1CVSS7.9AI score0.00681EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/11/30 12:00 a.m.•9 views

PT-2021-23542

Name of the Vulnerable Software and Affected Versions TopEase Platform versions prior to 7.1.28 Description The issue allows an authenticated remote attacker with Object Modification privileges to inject arbitrary HTML and JavaScript code in an object attribute via the Structure Component. This c...

8.1CVSS0.00681EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/30 12:00 a.m.•11 views

CVE-2021-42118: Improper Neutralization of Input During Web Page Generation

Persistent Cross Site Scripting in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 via the Structure Component allows an authenticated remote attacker with Object Modification privileges to inject arbitrary HTML and JavaScript code in an object...

8.1CVSS6AI score0.00681EPSS
SaveExploits0References3
Rows per page
Query Builder