CVE-2020-10372

Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI...

Cross site scripting

Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI...

CVE-2020-10372

The vulnerability is CVE-2020-10372 affecting Ramp AltitudeCDN Altimeter before 2.4.0. It allows an authenticated Stored XSS through the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI. This is the concrete impact described in multiple sources (inc...

CVE-2020-10372: Improper Neutralization of Input During Web Page Generation

Ramp AltitudeCDN Altimeter before 2.4.0 allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the dms/rest/services/datastore/createOrEditValueForKey URI...

PT-2020-12044

Name of the Vulnerable Software and Affected Versions Ramp AltitudeCDN Altimeter versions prior to 2.4.0 Description The issue allows authenticated Stored XSS via the vdms/ipmapping.jsp location field to the "dms/rest/services/datastore/createOrEditValueForKey" URI. Recommendations For versions...