CVE-2022-26962

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...

CVE-2022-26962

The Italtel NFV 11.1.2-20210318 software is vulnerable to Multiple Stored XSS within the NP_BCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS endpoint. The root cause is the improper neutralization of input through the name , username , or mrfAnnouncementName para...

CVE-2022-26962

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...

EUVD-2022-56058

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...

CVE-2022-26962: Improper Neutralization of Input During Web Page Generation

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...

CVE-2022-26962

Italtel NFV 11.1.2-20210318 allows Multiple Stored XSS under NPBCCAS-RMCTRL-01/IMCSCIWebGui/configuration.jsp?opration=list&object=announcementAS via the name, username, or mrfAnnouncementNameparameter. A malicious user leveraging this vulnerability could inject arbitrary JavaScript. The maliciou...

PT-2026-89584

Name of the Vulnerable Software and Affected Versions Italtel NFV version 11.1.2-20210318 Description Stored Cross-Site Scripting XSS occurs when an application stores unsanitized user input on the server, which is later executed in the browser of another user. The issue exists at the endpoint "N...