Lucene search
+L

2 matches found

NVD
NVD
•added 2020/05/14 6:15 p.m.•30 views

CVE-2020-12677

An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS. This affects 2018 - 2018.0 prior to 2018.0.3, 20...

6.1CVSS6.7AI score0.01908EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/05/14 12:00 a.m.•5 views

CVE-2020-12677: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Progress MOVEit Automation Web Admin. A Web Admin application endpoint failed to adequately sanitize malicious input, which could allow an unauthenticated attacker to execute arbitrary code in a victim's browser, aka XSS. This affects 2018 - 2018.0 prior to 2018.0.3, 20...

6.1CVSS6.9AI score0.01908EPSS
SaveExploits0References2
Rows per page
Query Builder