PT-2019-13594

Name of the Vulnerable Software and Affected Versions Veeam ONE Reporter version 9.5.0.3201 Description The issue allows for cross-site scripting XSS attacks via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in "CommonDataHandlerReadOnly.ashx" API endpoint. This can...

CVE-2019-14297: Improper Neutralization of Input During Web Page Generation

Veeam ONE Reporter 9.5.0.3201 allows XSS via the Add/Edit Widget with a crafted Caption field to setDashboardWidget in CommonDataHandlerReadOnly.ashx...