CVE-2018-19775

CVE-2018-19775 describes a reflected cross-site scripting flaw in InfoVista VistaPortal SE 5.1 (build 51029). The vulnerability affects the Variables.jsp page, where XSS is possible via the ConnPoolName and GroupId parameters. The issue is caused by insufficient input sanitization on the server s...