CVE-2019-14298

Veeam ONE Reporter 9.5.0.3201 allows XSS via a crafted Descriptionconfig field to addDashboard or editDashboard in CommonDataHandlerReadOnly.ashx...

CVE-2019-14298

Veeam ONE Reporter 9.5.0.3201 is vulnerable to Cross‑Site Scripting (XSS) via a crafted Description(config) field in the addDashboard or editDashboard paths of CommonDataHandlerReadOnly.ashx. The issue is triggered when untrusted input is processed by the web UI, enabling execution of client-side...