CVE-2020-35727

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseDirs.do file via the title parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2020-35727

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseDirs.do file via the title parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2020-35727

The vulnerability is CVE-2020-35727: a Reflected XSS in Quest Policy Authority 8.1.2.200 where an attacker can inject code via a crafted link to BrowseDirs.do using the title parameter. Impact is remote code injection in the browser; affected product is Quest Policy Authority version 8.1.2.200 (n...