CVE-2018-7996

Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter...

Eramba Cross-Site Scripting Vulnerability

Eramba is an open source, enterprise-level IT governance application from Eramba UK. The program features IT security, compliance auditing and analysis, and more. A cross-site scripting vulnerability exists in the prompt pop-up box in Eramba e version 1.0.6.033, which stems from the program's...

Cross site scripting

Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter...

CVE-2018-7996

Eramba e1.0.6.033 has Stored XSS on the tooltip box via the /programScopes description parameter...

PT-2018-18366

Name of the Vulnerable Software and Affected Versions: Eramba version 1.0.6.033 Description: The issue is related to Stored XSS on the tooltip box. It can be exploited via the "/programScopes" API endpoint, specifically through the description parameter. Recommendations: For Eramba version...