CVE-2016-5061

Multiple cross-site scripting XSS vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers to inject arbitrary web script or HTML via the 1 HTTPAgent, 2 MacAgent, 3 getExternalURL, or 4 retrieveTrustedUrl page...

CVE-2016-5061

CVE-2016-5061 affects the Aternity webserver (pre-9.0.1). The issue is a cross-site scripting (XSS) vulnerability in the web UI pages (HTTPAgent, MacAgent, getExternalURL, retrieveTrustedUrl) that allows remote attackers to inject arbitrary script/HTML. The NVD entries classify it as CVSSv2/4.3 (...