Intland Software codeBeamer Cross-Site Scripting Vulnerability

Intland Software codeBeamer is an application lifecycle management platform from Intland Software, Germany. The platform supports application lifecycle management, requirements management, risk management and software development. A cross-site scripting vulnerability exists in Intland Software...

CVE-2019-19913: Improper Neutralization of Input During Web Page Generation

In Intland codeBeamer ALM 9.5 and earlier, there is stored XSS via the Trackers Title parameter...

CVE-2019-19912: Improper Neutralization of Input During Web Page Generation

In Intland codeBeamer ALM 9.5 and earlier, a cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF file...

Intland Software codeBeamer cross-site scripting vulnerability (CNVD-2020-20428)

Intland Software codeBeamer is an application lifecycle management platform from Intland Software, Germany. The platform supports application lifecycle management, requirements management, risk management and software development. A cross-site scripting vulnerability exists in Intland Software...

codeBeamer 9.5 Cross Site Scripting

Packet Storm Security note - Finding one of two: codeBeamer – Stored Cross-Site Scripting =============================================================================== Identifiers ------------------------------------------------- CVE-2019-19912 CVSSv3 score...

PT-2020-10292 · Intland · Codebeamer Alm

Name of the Vulnerable Software and Affected Versions: Intland codeBeamer ALM versions 9.5 and earlier Description: A cross-site scripting XSS vulnerability in the Upload Flash File feature allows authenticated remote attackers to inject arbitrary scripts via an active script embedded in an SWF...

PT-2020-10293 · Intland · Codebeamer Alm

Name of the Vulnerable Software and Affected Versions: Intland codeBeamer ALM versions 9.5 and earlier Description: The issue is related to stored XSS via the Trackers Title parameter. This allows for malicious code to be stored and executed when a user views the affected page. There is no...