Cross site scripting

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

Cross site scripting

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

CVE-2023-31163 Improper Neutralization of Input During Web Page Generation

An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller SEL RTAC Web Interface could allow a remote authenticated attacker to inject and execute arbitrary script code. See SEL...

CVE-2023-31158

CVE-2023-31158 affects Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface. The issue is an Improper Neutralization of Input During Web Page Generation (XSS) in the web interface, enabling a remote authenticated attacker to inject and execute arbitrary scr...

CVE-2023-31156

CVE-2023-31156 describes an Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) vulnerability in the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface. The vulnerability could allow a remote authenticated attacker to inject...

CVE-2023-31155

CVE-2023-31155 affects the Schweitzer Engineering Laboratories Real-Time Automation Controller (SEL RTAC) Web Interface. The vulnerability is an Improper Neutralization of Input During Web Page Generation (XSS) in the web interface, allowing a remote authenticated attacker to inject and execute a...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' in GitHub repository nilsteampassnet/teampass prior to 3.0.7...

CVE-2023-30743

Due to improper neutralization of input in SAPUI5 - versions SAPUI 750, SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, UI700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by th...

Design/Logic Flaw

Due to improper neutralization of input in SAPUI5 - versions SAPUI 750, SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, UI700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by th...

CVE-2023-30743

The CVE-2023-30743 entry affects SAPUI5: sap.m.FormattedText in SAPUI5 versions SAP_UI 750, 754, 755, 756, 757, UI_700 200 is vulnerable to injection of untrusted CSS due to improper input neutralization. This can block user interaction and, without URL validation, could enable a phishing-style r...

CVE-2023-30743 Improper Neutralization of Input in SAPUI5

Due to improper neutralization of input in SAPUI5 - versions SAPUI 750, SAPUI 754, SAPUI 755, SAPUI 756, SAPUI 757, UI700 200, sap.m.FormattedText SAPUI5 control allows injection of untrusted CSS. This blocks user’s interaction with the application. Further, in the absence of URL validation by th...

Siemens SICAM P850 and SICAM P855 Improper Neutralization of Input During Web Page Generation (CVE-2022-29880)

A vulnerability has been identified in SICAM P850 All versions V3.00, SICAM P855 All versions V3.00. Affected devices do not properly validate input in the configuration interface. This could allow an authenticated attacker to place persistent XSS attacks to perform arbitrary actions in the name ...

CVE-2023-22637

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability CWE-79 in FortiNAC-F version 7.2.0, FortiNAC version 9.4.2 and below, 9.2 all versions, 9.1 all versions, 8.8 all versions, 8.7 all versions in License Management would permit an authenticated...

FortiNAC - Stored XSS triggering RCE via license key forgery

An improper neutralization of input during web page generation 'Cross-site Scripting' vulnerability CWE-79 in FortiNAC License Management would permit an authenticated attacker to trigger remote code execution via crafted licenses...

CVE-2022-47509

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject HTML...

CVE-2022-47509

The SolarWinds Platform was susceptible to the Incorrect Input Neutralization Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform account to append URL parameters to inject HTML...

CVE-2022-47509

CVE-2022-47509 relates to the SolarWinds Platform and is caused by an Incorrect Input Neutralization vulnerability that allows a remote attacker with a valid SolarWinds Platform account to append URL parameters to inject HTML. The entry is supported by multiple connected sources showing the same ...

PT-2023-15383 · Solarwinds · Solarwinds Platform

Name of the Vulnerable Software and Affected Versions: SolarWinds Platform affected versions not specified Description: The issue allows a remote adversary with a valid SolarWinds Platform account to inject HTML by appending URL parameters. This is due to the Incorrect Input Neutralization...

Cross site scripting

A CWE-79: Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability exists that could cause code and session manipulation when malicious code is inserted into the browser. Affected Products: NetBotz 4 - 355/450/455/550/570 V4.7.0 and prior...

SolarWinds Platform 2023.0 < 2023.2 Multiple Vulnerabilities

The version of SolarWinds Platform installed on the remote host is prior to 2023.2. It is, therefore, affected by multiple vulnerabilities as referenced in the solarwindsplatform20232 advisory. - The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability...