Lucene search
+L

6 matches found

Cvelist
Cvelist
•added 2026/08/26 6:54 p.m.•39 views

CVE-2026-56547 An input reflection vulnerability affects HCL Traveler

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them. The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects...

3.5CVSS0.00281EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/26 6:54 p.m.•20 views

CVE-2026-56547

An input reflection vulnerability in HCL Traveler affects the Apple profile generation used to synchronize Mail, Calendar, and Contacts. The Logon Name and Mail Address values are reflected back into the generated profile without validation against the Domino directory entry for the authenticated...

3.5CVSS5.2AI score0.00281EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/08/26 6:54 p.m.•10 views

CVE-2026-56547 An input reflection vulnerability affects HCL Traveler

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them. The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects...

3.5CVSS5.8AI score0.00281EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/08/26 12:00 a.m.•16 views

PT-2026-82251

The Apple profile generated for the Apple built-in Mail, Calendar and Contacts account to synchronize with HCL Traveler requires the Logon Name and Mail Address to be embedded in them. The values cannot be changed later on, so the Apple profile generation page asks for those values and reflects...

3.5CVSS5.2AI score0.00281EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/01/11 12:00 a.m.•14 views

PT-2021-11832 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to store malicious code in multiple fields, such as first name, last name, and logon name, when creating or modifying a user via the "submitUser.jsp" file...

5.4CVSS7.2AI score0.0123EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/01/11 12:00 a.m.•7 views

CVE-2020-35720: Improper Neutralization of Input During Web Page Generation

Stored XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to store malicious code in multiple fields first name, last name, and logon name when creating or modifying a user via the submitUser.jsp file. NOTE: This vulnerability only affects products that are no longer supported by the...

5.4CVSS5.9AI score0.0123EPSS
SaveExploits1References2
Rows per page
Query Builder