CVE-2021-42117

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 allows an authenticated remote attacker with Object Modification privileges to insert arbitrary HTML without code execution...

Input validation

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 on an object’s attributes with numeric format allows an authenticated remote attacker with Object Modification privileges to insert an unexpected format, which make...

CVE-2021-42119

CVE-2021-42119 describes a persistent cross-site scripting vulnerability in Business-DNA Solutions GmbH TopEase platform (version ≤ 7.1.27) exposed through the Search Functionality. The issue arises when authenticated users with Object Modification privileges can inject arbitrary HTML/JavaScript ...

CVE-2021-42117 UI Redressing in TopEase

Insufficient Input Validation in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 allows an authenticated remote attacker with Object Modification privileges to insert arbitrary HTML without code execution...

PT-2021-23542

Name of the Vulnerable Software and Affected Versions TopEase Platform versions prior to 7.1.28 Description The issue allows an authenticated remote attacker with Object Modification privileges to inject arbitrary HTML and JavaScript code in an object attribute via the Structure Component. This c...

PT-2021-23541

Name of the Vulnerable Software and Affected Versions TopEase Platform versions prior to 7.1.28 Description The issue is related to insufficient input validation in web applications, allowing an authenticated remote attacker with Object Modification privileges to insert arbitrary HTML. This can b...

PT-2021-23544

Name of the Vulnerable Software and Affected Versions TopEase Platform versions prior to 7.1.28 Description The issue is related to insufficient input validation in web applications, allowing an authenticated remote attacker with object modification privileges to insert arbitrarily long strings...

PT-2021-23543

Name of the Vulnerable Software and Affected Versions TopEase Platform versions prior to 7.1.28 Description The issue allows authenticated users with Object Modification privileges to inject arbitrary HTML and JavaScript in object attributes via the Search Functionality. This can alter the intend...