PT-2018-14803

Name of the Vulnerable Software and Affected Versions tianti version 2.3 Description The issue is related to reflected XSS in the user management module. It occurs via the userName parameter in the "tianti-module-admin/user/list" endpoint. Recommendations For version 2.3, consider restricting...

CVE-2018-19091: Improper Neutralization of Input During Web Page Generation

tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter...

CVE-2014-2390

Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...

CVE-2014-2390: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the User Management module in McAfee Network Security Manager NSM before 6.1.15.39 7.1.5.x before 7.1.5.15, 7.1.15.x before 7.1.15.7, 7.5.x before 7.5.5.9, and 8.x before 8.1.7.3 allows remote attackers to hijack the authentication of users for...