309 matches found
Cross site scripting
Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the X-Rewrite-URL parameter...
CVE-2023-29714
Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via the username, password, and language cookies parameter...
PT-2023-22368 · Vade Secure · Vade Secure Gateway
Name of the Vulnerable Software and Affected Versions: Vade Secure Gateway affected versions not specified Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted payload to the X-Rewrite-URL parameter. This enables the attacker to potentially...
PT-2023-22370 · Vade Secure · Vade Secure Gateway
Name of the Vulnerable Software and Affected Versions: Vade Secure Gateway affected versions not specified Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via the username, password, and language cookies parameter. This enables the attacker to perform...
PT-2023-22369 · Vade Secure · Vade Secure Gateway
Name of the Vulnerable Software and Affected Versions: Vade Secure Gateway affected versions not specified Description: A Cross Site Scripting issue allows a remote attacker to execute arbitrary code via a crafted payload to the GET request after the /css/ directory. This enables the attacker to...
CVE-2023-29712
CVE-2023-29712, CVE-2023-29713, CVE-2023-29714 describe Cross Site Scripting vulns in Vade Secure Gateway. CVE-2023-29712: XSS via crafted payload to the X-Rewrite-URL parameter. CVE-2023-29713: XSS via a GET request after the /css/ directory. CVE-2023-29714: XSS via the username, password, and l...
CVE-2023-29712
Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the X-Rewrite-URL parameter...
Vade Secure Gateway 跨站脚本漏洞
Vade Secure Gateway is an engineering intelligence-driven collaborative email security from Vade Secure. A security vulnerability exists in Vade Secure Gateway that stems from a cross-site scripting vulnerability in the X-Rewrite-URL parameter...
CVE-2023-29713
Cross Site Scripting vulnerability found in Vade Secure Gateway allows a remote attacker to execute arbitrary code via a crafted payload to the GET request after the /css/ directory...
Vade Secure Gateway 跨站脚本漏洞
Vade Secure Gateway is an engineering intelligence-driven collaborative email security from Vade Secure. A security vulnerability exists in Vade Secure Gateway. An attacker could execute arbitrary code by exploiting the vulnerability...
Vade Secure Gateway 跨站脚本漏洞
Vade Secure Gateway is an engineering intelligence-driven collaborative email security from Vade Secure. A security vulnerability exists in Vade Secure Gateway. An attacker can exploit the vulnerability to execute arbitrary code via the username, password and language cookie parameters...
CVE-2023-29714
CVE-2023-29714 is a Cross Site Scripting vulnerability in Vade Secure Gateway . The issue allows a remote attacker to execute arbitrary code via the username, password, and language cookies parameter. The provided sources describe the vulnerability consistently across multiple databases (includin...
CVE-2023-29713
CVE-2023-29713 affects Vade Secure Gateway. The vulnerability is a Cross Site Scripting (XSS) issue in the handling of GET requests after the /css/ directory, enabling a remote attacker to execute arbitrary code via a crafted payload. The available sources indicate a reflected-type XSS in this pr...
CVE-2023-23955
Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Server-Side Request Forgery vulnerability...
CVE-2023-23954
Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability...
CVE-2023-23954
Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability...
CVE-2023-23955
Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Server-Side Request Forgery vulnerability...
CVE-2023-23953
Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation of Privilege vulnerability...