CVE-2020-35724

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err parameter or indirectly via the cpr, tcp, or abs parameter. NOTE: This vulnerability only affects products that are no...

CVE-2020-35724

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err parameter or indirectly via the cpr, tcp, or abs parameter. NOTE: This vulnerability only affects products that are no...

CVE-2020-35724

Quest Policy Authority 8.1.2.200 is affected by a reflected XSS vulnerability. Exploitation vectors: crafted links to Error.jsp via the err parameter, or indirectly via cpr, tcp, or abs parameters. Impact: user’s browser code execution; affected products are no longer maintained, with no fixed ve...