CVE-2018-15528

Reflected Cross-Site Scripting exists in the Java System Solutions SSO plugin 4.0.13.1 for BMC MyIT. A remote attacker can abuse this issue to inject client-side scripts into the "selectsso" function. The payload is triggered when the victim opens a prepared /ux/jss-sso/arslogin?XSS link and then...

PT-2018-13065

Name of the Vulnerable Software and Affected Versions BMC MyIT Java System Solutions SSO plugin version 4.0.13.1 Description A Reflected Cross-Site Scripting issue exists, allowing a remote attacker to inject client-side scripts into the select sso function. This is triggered when a victim opens ...