Lucene search
K

8 matches found

OSV
OSV
added 2021/01/11 3:15 a.m.0 views

CVE-2020-35203

Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the initFile.jsp file via the msg parameter. NOTE: This vulnerability only affects products that are no longer supported b...

6.1CVSS6.4AI score
Exploits0References2
OSV
OSV
added 2021/01/11 3:15 a.m.0 views

CVE-2020-35205

Server Side Request Forgery SSRF in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbound connections via the initFile.jsp file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

9.8CVSS5.8AI score0.00377EPSS
Exploits1References2
Prion
Prion
added 2021/01/11 3:15 a.m.8 views

Server side request forgery (ssrf)

Server Side Request Forgery SSRF in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbound connections via the initFile.jsp file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

7.5CVSS9.3AI score0.00377EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/01/11 2:52 a.m.9 views

CVE-2020-35205

Server Side Request Forgery SSRF in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbound connections via the initFile.jsp file. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

9.4AI score0.00377EPSS
Exploits1References2
Cvelist
Cvelist
added 2021/01/11 2:48 a.m.9 views

CVE-2020-35203

Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the initFile.jsp file via the msg parameter. NOTE: This vulnerability only affects products that are no longer supported b...

6.1AI score0.0024EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.2 views

PT-2021-11721 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows attackers to inject malicious code into the browser via a specially crafted link to the "initFile.jsp" file using the msg parameter. This affects products that are no long...

6.1CVSS7AI score0.0024EPSS
Exploits1References5
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.2 views

PT-2021-11723 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows attackers to perform Server Side Request Forgery SSRF in the Web Compliance Manager component, enabling them to scan internal ports and make outbound connections via the...

9.8CVSS6.9AI score0.00377EPSS
Exploits1References6
CNNVD
CNNVD
added 2021/01/10 12:0 a.m.2 views

Quest Policy Authority For Unified Communications Code Issue Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data text and instant messaging, videoconferencing, email and voicemail between various media. A code issue vulnerability exists ...

9.8CVSS7.4AI score0.00377EPSS
Exploits1References3
Rows per page
Query Builder