45 matches found
CVE-2022-26146
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
CVE-2022-26146
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
CVE-2022-26146
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
Cross site scripting
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
CVE-2022-26146
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
CVE-2022-26146
CVE-2022-26146 concerns Tricentis qTest prior to 10.4, where an authenticated attacker can trigger a stored cross‑site scripting (XSS) vulnerability through input handling in the WEB application. The Red Hat and other feeds confirm the same description; no concrete exploit specifics, affected fil...
Tricentis qTest cross-site scripting vulnerabilities
Tricentis qTest is used by Tricentis to centrally manage and understand software testing activities from conception to production. qTest has a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application, which can be exploited by...
PT-2022-17693
Name of the Vulnerable Software and Affected Versions Tricentis qTest versions prior to 10.4 Description The issue allows stored XSS by an authenticated attacker. Recommendations For versions prior to 10.4, update to version 10.4 or later to resolve the issue...
CVE-2022-26146: Improper Neutralization of Input During Web Page Generation
Tricentis qTest before 10.4 allows stored XSS by an authenticated attacker...
com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2022-25174 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15)
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.0.4,...
com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2022-25177 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15)
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.0.4,...
com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), cprice404:pipeline-classpath (0.1.0) +7 more potentially affected by CVE-2022-25176 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.22, =1.15, =1.15, =1.1, =1.0....
com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2022-25178 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15)
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.0.4,...
com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2022-25181 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15)
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.0.4,...
com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), cprice404:pipeline-classpath (0.1.0) +7 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15)
org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.22, =1.15, =1.15, =1.1, =1.0....
com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2022-25182 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15)
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.0.4,...
com.qasymphony.ci.jenkins:qtest (>=1.3.0, <=1.4.6), org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15) +1 more potentially affected by CVE-2022-25183 via org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15)
org.jenkins-ci.plugins.workflow:workflow-cps-global-lib MAVEN version 1.15 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps-global-lib and may be impacted: - com.qasymphony.ci.jenkins:qtest =1.3.0, =1.0.4,...
CVE-2018-15180
qTest Portal in QASymphony qTest Manager 9.0.0 has an Open Redirect via the /portal/loginform redirect parameter...