4 matches found
Cross site scripting
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/UserPopupAddNewProp.jsp" has reflected XSS via the ConnPoolName parameter...
PT-2018-15107
Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description A Cross Site Scripting issue exists, allowing reflected XSS via the ConnPoolName parameter in the "/VPortal/mgtconsole/UserPopupAddNewProp.jsp" API endpoint. Recommendations For...
CVE-2018-19815: Improper Neutralization of Input During Web Page Generation
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/UserPopupAddNewProp.jsp" has reflected XSS via the ConnPoolName parameter...
Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07216)
Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/UserPopupAddNewProp.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web...