Lucene search
+L

27 matches found

Positive Technologies
Positive Technologies
•added 2022/10/24 12:00 a.m.•17 views

PT-2022-20745 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions through 8.2 Description: The issue allows for XSS via an attachment or OX Drive content when a client uses the len or off parameter. This can be exploited when the client utilizes specific parameters in conjunction with...

6.1CVSS6AI score0.00527EPSS
SaveExploits0References3
NVD
NVD
•added 2021/12/15 7:15 a.m.•29 views

CVE-2021-26787

A cross site scripting XSS vulnerability in Genesys Workforce Management 8.5.214.20 can occur during record deletion via the Time-off parameter...

6.1CVSS0.00758EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/12/15 7:15 a.m.•10 views

CVE-2021-26787

A cross site scripting XSS vulnerability in Genesys Workforce Management 8.5.214.20 can occur during record deletion via the Time-off parameter...

6.1CVSS5.5AI score0.00758EPSS
SaveExploits0References4
Prion
Prion
•added 2021/12/15 7:15 a.m.•30 views

Cross site scripting

A cross site scripting XSS vulnerability in Genesys Workforce Management 8.5.214.20 can occur during record deletion via the Time-off parameter...

4.3CVSS6AI score0.00758EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2021/12/15 6:59 a.m.•77 views

CVE-2021-26787

CVE-2021-26787 involves a cross-site scripting (XSS) vulnerability in Genesys Workforce Management 8.5.214.20 that can occur during record deletion via the Time-off parameter. The root cause is not explicitly stated beyond the general lack of input validation/output encoding that enables client-s...

6.1CVSS6AI score0.00758EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/12/15 12:00 a.m.•4 views

CVE-2021-26787: Improper Neutralization of Input During Web Page Generation

A cross site scripting XSS vulnerability in Genesys Workforce Management 8.5.214.20 can occur during record deletion via the Time-off parameter...

6.1CVSS5AI score0.00758EPSS
SaveExploits0References2
OSV
OSV
•added 2009/06/27 6:47 p.m.•13 views

DEBIAN-CVE-2008-6838

Cross-site scripting XSS vulnerability in search.php in Zoph 0.7.2.1 allows remote attackers to inject arbitrary web script or HTML via the off parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

4.3CVSS5.8AI score0.0175EPSS
SaveExploits2References1
Rows per page
Query Builder