PT-2018-15087

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "EditCurrentPresentSpace.jsp" page, where reflected XSS is possible via the ConnPoolName, GroupId, and ParentId parameter...

PT-2018-15110

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it affects the "/VPortal/mgtconsole/Contacts.jsp" page, where a reflected XSS vulnerability exists via the ConnPoolNa...

CVE-2018-19815: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/UserPopupAddNewProp.jsp" has reflected XSS via the ConnPoolName parameter...

CVE-2018-19811: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/Import.jsp" has reflected XSS via the ConnPoolName parameter...

PT-2018-15080

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "EditCurrentPresentSpace.jsp" page, where reflected XSS is possible via the ConnPoolName, GroupId, and ParentId parameter...

PT-2018-15088

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it affects the "EditCurrentUser.jsp" page, where reflected XSS is possible via the GroupId and ConnPoolName parameter...

PT-2018-15105

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue concerns a Cross Site Scripting problem. Specifically, it affects the "/VPortal/mgtconsole/Subscribers.jsp" page, where reflected XSS can occur via the ConnPoolName or...

PT-2018-15113

Name of the Vulnerable Software and Affected Versions InfoVista VistaPortal SE version 5.1 build 51029 Description The issue is related to Cross Site Scripting. It affects the "/VPortal/mgtconsole/SecurityPolicies.jsp" page, where reflected XSS is possible via the ConnPoolName parameter...

CVE-2018-19821: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 build 51029. The page "/VPortal/mgtconsole/SecurityPolicies.jsp" has reflected XSS via the ConnPoolName parameter...

Infovista VistaPortal SE '/VPortal/mgtconsole/Roles.jsp' page cross-site scripting vulnerability

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Roles.jsp' page in Infovista VistaPortal SE version 5.1 build 51029. A remote attacker can exploit this vulnerability to inject arbitrary web script or...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07219)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Subscriptions.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the help of the The...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07229)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the UserProperties.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the 'ConnPoolName' parameter to inject arbitrary...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07218)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Subscribers.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the help of the The...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07216)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/UserPopupAddNewProp.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07231)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the GroupRessourceAdmin.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the 'ConnPoolName' parameter to inject...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07215)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/Contacts.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web script or HTM...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07235)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the RolePermissions.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker with the 'ConnPoolName' parameter to inject arbitrar...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07232)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the PresentSpace.jsp page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to inject arbitrary web script or HTML with the help of...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07217)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/categorytree/ChooseCategory.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote An attacker can inject...

Infovista VistaPortal SE Cross-Site Scripting Vulnerability (CNVD-2019-07214)

Infovista VistaPortal SE is a Web-based application from Infovista USA. A cross-site scripting vulnerability exists in the '/VPortal/mgtconsole/AdminAuthorizationFrame.jsp' page in Infovista VistaPortal SE version 5.1 build 51029, which can be exploited by a remote attacker to A remote attacker c...