CVE-2018-19815

CVE-2018-19815 affects InfoVista VistaPortal SE 5.1 (build 51029). The vulnerable component is the web page "/VPortal/mgtconsole/UserPopupAddNewProp.jsp", where the parameter ConnPoolName enables a reflected XSS vulnerability. This could allow an attacker to inject arbitrary script into the clien...