CVE-2018-19817

CVE-2018-19817 concerns a reflected Cross-Site Scripting flaw in InfoVista VistaPortal SE (version 5.1, build 51029). The vulnerability affects the page "/VPortal/mgtconsole/AdminAuthorisationFrame.jsp" where the parameters ConnPoolName or GroupId can reflect attacker-controlled input. Documented...