Lucene search
+L

1320 matches found

Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.9 views

PT-2021-11832 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to store malicious code in multiple fields, such as first name, last name, and logon name, when creating or modifying a user via the "submitUser.jsp" file...

5.4CVSS7.2AI score0.0123EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.14 views

PT-2021-11838 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "/WebCM/Applications/Reports/index.jsp" file via the by parameter. This...

6.1CVSS6.8AI score0.01614EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.9 views

PT-2021-11724 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows attackers to inject malicious code into the browser via a specially crafted link to the "cConn.jsp" file using the ur parameter. This affects products that are no longer...

6.1CVSS7AI score0.01299EPSS
SaveExploits1References7
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.7 views

PT-2021-11723 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows attackers to perform Server Side Request Forgery SSRF in the Web Compliance Manager component, enabling them to scan internal ports and make outbound connections via the...

9.8CVSS6.9AI score0.01909EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.6 views

PT-2021-11836 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "Error.jsp" file. This can be achieved directly via the err parameter or...

5.4CVSS7.2AI score0.0123EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.6 views

PT-2021-11839 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "BrowseDirs.do" file using the title parameter. This affects products that a...

5.4CVSS7.2AI score0.01289EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.10 views

PT-2021-11834 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to force user modification or creation via a specially crafted link to the submitUser.jsp file. This is a result of a CSRF vulnerability in the Web...

6.5CVSS6.7AI score0.00679EPSS
SaveExploits1References6
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.7 views

PT-2021-11833 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "BrowseAssets.do" file using the title parameter. This affects products that...

5.4CVSS7.3AI score0.01262EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.8 views

PT-2021-11831 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "/WebCM/Applications/Search/index.jsp" file via the added parameter. This...

6.1CVSS6.9AI score0.01581EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.8 views

PT-2021-11835 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "ReportPreview.do" file using the referer parameter. This affects products...

5.4CVSS7.2AI score0.01262EPSS
SaveExploits1References5
Positive Technologies
Positive Technologies
added 2021/01/11 12:0 a.m.9 views

PT-2021-11837 · Quest · Quest Policy Authority

Name of the Vulnerable Software and Affected Versions: Quest Policy Authority version 8.1.2.200 Description: The issue allows remote attackers to inject malicious code into the browser via a specially crafted link to the "/WebCM/index.jsp" file using the msg parameter. This affects products that...

6.1CVSS7AI score0.01614EPSS
SaveExploits1References5
CNNVD
CNNVD
added 2021/01/10 12:0 a.m.10 views

Quest Policy Authority Cross-Site Scripting Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data text and instant messaging, videoconferencing, email and voicemail between various media. A cross-site scripting vulnerabili...

5.4CVSS6AI score0.0123EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/01/10 12:0 a.m.11 views

Quest Policy Authority Cross-Site Scripting Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data text and instant messaging, videoconferencing, email and voicemail between various media. A cross-site scripting vulnerabili...

6.1CVSS6.3AI score0.01581EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/01/10 12:0 a.m.12 views

Quest Software Policy Authority For Unified Communications Cross-Site Scripting Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data text and instant messaging, videoconferencing, email and voicemail between various media. A cross-site scripting vulnerabili...

5.4CVSS6AI score0.01289EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/01/10 12:0 a.m.10 views

Quest Software Policy Authority For Unified Communications Cross-Site Scripting Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data between various media text and instant messaging, video conferencing, email and voicemail. A cross-site scripting...

5.4CVSS6AI score0.01262EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/01/10 12:0 a.m.9 views

Quest Policy Authority For Unified Communications Cross-Site Scripting Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data text and instant messaging, videoconferencing, email and voicemail between various media. A cross-site scripting vulnerabili...

6.1CVSS6.3AI score0.01614EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/01/10 12:0 a.m.11 views

Quest Policy Authority For Unified Communications Code Issue Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data text and instant messaging, videoconferencing, email and voicemail between various media. A code issue vulnerability exists ...

9.8CVSS7.4AI score0.01909EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/01/10 12:0 a.m.12 views

Quest Policy Authority Cross-Site Scripting Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data between various media text and instant messaging, videoconferencing, email and voicemail. A cross-site scripting vulnerabili...

6.1CVSS6.3AI score0.01326EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/01/10 12:0 a.m.10 views

Quest Software Policy Authority For Unified Communications 跨站脚本漏洞

Quest Policy Authority For Unified Communications is a software from Quest, Inc. that is used in corporate environments to consolidate communication data between various media text and instant messaging, video conferencing, email and voicemail. A cross-site scripting vulnerability exists in Quest...

6.1CVSS6.3AI score0.01326EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2021/01/10 12:0 a.m.10 views

Quest Policy Authority Cross-Site Scripting Vulnerability

Quest Software Policy Authority For Unified Communications is a software from Quest Software, Inc. that is used in enterprise environments to consolidate communication data text and instant messaging, videoconferencing, email and voicemail between various media. A cross-site scripting vulnerabili...

5.4CVSS6AI score0.0123EPSS
SaveExploits1References3
Rows per page
Query Builder