CVE-2018-19820

CVE-2018-19820 is a cross-site scripting vulnerability affecting InfoVista VistaPortal SE 5.1 (build 51029). The flaw is in the page /VPortal/mgtconsole/Roles.jsp and is triggered via the ConnPoolName parameter, resulting in reflected XSS. Multiple sources (e.g., NVD and CVE lists) confirm the vu...