CVE-2022-38489

An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting XSS. Version 2022.1.110.1.02 fixes the vulnerably...

CVE-2022-38489

An issue was discovered in EasyVista 2020.2.125.3 and 2022.1.109.0.03 It is prone to stored Cross-site Scripting XSS. Version 2022.1.110.1.02 fixes the vulnerably...

CVE-2021-33231

Cross Site Scripting XSS vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the notes field...

CVE-2021-33231

Cross Site Scripting XSS vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the notes field...

Cross site scripting

Cross Site Scripting XSS vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the notes field...

CVE-2021-33231

Cross Site Scripting XSS vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the notes field...

CVE-2021-33231

The CVE-2021-33231 issue affects EasyVista Service Manager 2018.1.181.1, specifically the New equipment page. The vulnerability is a Cross Site Scripting (XSS) flaw in the notes field that can allow remote attackers to run arbitrary code. The Red Hat, CVE, and related records corroborate the same...

CVE-2021-33231

Cross Site Scripting XSS vulnerability in New equipment page in EasyVista Service Manager 2018.1.181.1 allows remote attackers to run arbitrary code via the notes field...

PT-2022-10220 · Easyvista · Easyvista Service Manager

Name of the Vulnerable Software and Affected Versions: EasyVista Service Manager version 2018.1.181.1 Description: The issue is related to a Cross Site Scripting XSS vulnerability in the New equipment page. This vulnerability allows remote attackers to run arbitrary code via the notes field...

EasyVista Service Manager 跨站脚本漏洞

EasyVista Service Manager is a server manager from EasyVista. A security vulnerability exists in EasyVista Service Manager version 2018.1.181.1, which stems from a cross-site scripting XSS vulnerability in the New Devices page that allows remote attackers to run arbitrary code via commented field...

CVE-2012-1256

The single sign-on SSO implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified urlaccount parameter, in conjunction with a valid login name in the SSPIHEADER parameter, to index.php...

Authentication flaw

The single sign-on SSO implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified urlaccount parameter, in conjunction with a valid login name in the SSPIHEADER parameter, to index.php...

CVE-2012-1256

The single sign-on SSO implementation in EasyVista before 2010.1.1.89 allows remote attackers to bypass authentication via a modified urlaccount parameter, in conjunction with a valid login name in the SSPIHEADER parameter, to index.php...

CVE-2012-1256

The CVE-2012-1256 issue affects EasyVista’s single sign-on (SSO) implementation prior to 2010.1.1.89. An attacker can bypass authentication by manipulating the url_account parameter in conjunction with a valid login name in the SSPI_HEADER parameter targeting index.php. The description indicates ...

EasyVista single sign-on authentication bypass vulnerability

Overview EasyVista contains an authentication bypass vulnerability in the EasyVista single sign-on feature. Description EasyVista contains an authentication bypass vulnerability in the EasyVista single sign-on feature that does not use encoded values. If an attacker can obtain the login names for...