4 matches found
Design/Logic Flaw
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
CVE-2020-8952
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...
PT-2020-20390
Name of the Vulnerable Software and Affected Versions Fiserv Accurate Reconciliation versions prior to 3.0.0 Description The issue allows for cross-site scripting XSS attacks via the timeOut parameter in the logout.jsp endpoint. This could potentially lead to malicious script execution on the...
CVE-2020-8952: Improper Neutralization of Input During Web Page Generation
Fiserv Accurate Reconciliation 2.19.0, fixed in 3.0.0 or higher, allows XSS via the logout.jsp timeOut parameter...