6882 matches found
CVE-2020-23849: Improper Neutralization of Input During Web Page Generation
Stored XSS was discovered in the tree mode of jsoneditor before 9.0.2 through injecting and executing JavaScript...
IBM Engineering Requirements Quality Assistant Cross-Site Scripting Vulnerability (CNVD-2021-02621)
IBM Engineering Requirements Quality Assistant uses AI to help you improve requirements quality from the authoring source. A cross-site scripting vulnerability exists in IBM Engineering Requirements Quality Assistant. An attacker could exploit the vulnerability to embed arbitrary JavaScript code ...
IBM Engineering Workflow Management Cross-Site Scripting Vulnerability (CNVD-2021-03014)
IBM Engineering Workflow Management EWM is a team collaboration tool that integrates a variety of development tasks, including iteration planning, process definition, change management, defect tracking, source code control, build automation, and reporting. A cross-site scripting vulnerability...
PT-2021-10951
Name of the Vulnerable Software and Affected Versions: jsoneditor versions prior to 9.0.2 Description: A stored XSS issue was found in the tree mode of jsoneditor, allowing attackers to inject and execute JavaScript. Recommendations: For versions prior to 9.0.2, update to version 9.0.2 or later t...
Cross site scripting
IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 188127...
CVE-2020-4663
IBM Engineering Requirements Quality Assistant On-Premises is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM...
PT-2021-12218
Name of the Vulnerable Software and Affected Versions IBM Emptoris Strategic Supply Management versions 10.1.0 through 10.1.3 Description The issue allows users to embed arbitrary JavaScript code in the Web UI, altering the intended functionality and potentially leading to credentials disclosure...
CVE-2020-4691
IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186698...
CVE-2020-4697
IBM Jazz Foundation products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 186790...
CVE-2020-8160: Improper Neutralization of Input During Web Page Generation
MendixSSO = 2.1.1 contains endpoints that make use of the openid handler, which is suffering from a Cross-Site Scripting vulnerability via the URL path. This is caused by the reflection of user-supplied data without appropriate HTML escaping or output encoding. As a result, a JavaScript payload m...
CVE-2020-4892
IBM Emptoris Contract Management 10.1.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 190979...
CVE-2020-4895
IBM Emptoris Strategic Supply Management 10.1.0, 10.1.1, and 10.1.3 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a truste...
CVE-2020-35170: Improper Neutralization of Input During Web Page Generation
Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site Scripting XSS vulnerability. An authenticated malicious user may potentially exploit this vulnerabilit...
PT-2021-11719
Name of the Vulnerable Software and Affected Versions: Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9 Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16 Dell EMC PowerMax OS 5978.221.221 Dell EMC PowerMax OS 5978.479.479 Description: The issue is a Cross-Site Scripting XSS...
HGiga MailSherlock Cross-Site Scripting Vulnerability
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. A cross-site scripting vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock not validating user parameters on multiple login pages. An attacker can explo...
IBM Cloud Pak System Cross-site Scripting Vulnerability
IBM Cloud Pak System is a full-stack, converged infrastructure with configurable, pre-integrated software from IBM USA. A cross-site scripting vulnerability exists in IBM Cloud Pak System 2.3. An attacker could exploit the vulnerability to embed arbitrary JavaScript code in the Web UI that could...
HGiga MailSherlock Cross-Site Scripting Vulnerability (CNVD-2021-06947)
HGiga MailSherlock is an email archiving and auditing system that provides a complete email security solution. A cross-site scripting vulnerability exists in HGiga MailSherlock. The vulnerability stems from MailSherlock failing to properly validate specific URL parameters. An attacker can exploit...
CVE-2020-35740
HGiga MailSherlock does not validate specific URL parameters properly that allows attackers to inject JavaScript syntax for XSS attacks...
