Lucene search
+L

4 matches found

osv_cve
osv_cve
•added 2021/07/25 10:15 p.m.•19 views

CVE-2021-37449

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= reflected...

5.4CVSS5.8AI score0.00504EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/07/25 10:15 p.m.•13 views

CVE-2021-37449

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= reflected...

5.4CVSS6.1AI score0.00504EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/25 12:00 a.m.•6 views

CVE-2021-37449: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS exists in NCH IVM Attendant v5.12 and earlier via /ogmlist?folder= reflected...

5.4CVSS5.7AI score0.00504EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/07/25 12:00 a.m.•8 views

PT-2021-21662

Name of the Vulnerable Software and Affected Versions NCH IVM Attendant versions 5.12 and earlier Description Cross Site Scripting XSS exists via the "/ogmlist?folder=" endpoint, which is reflected. This issue allows for malicious scripts to be injected into the webpage, potentially leading to...

5.4CVSS0.00504EPSS
SaveExploits0References6
Rows per page
Query Builder