Lucene search
+L

6 matches found

osv_cve
osv_cve
•added 2021/10/29 11:15 a.m.•26 views

CVE-2021-31862

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

6.1CVSS5.8AI score0.03985EPSS
SaveExploits2References2
attackerkb
attackerkb
•added 2021/10/29 11:15 a.m.•13 views

CVE-2021-31862

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

6.1CVSS6.4AI score0.03985EPSS
SaveExploits2References3
Cvelist
Cvelist
•added 2021/10/29 10:44 a.m.•52 views

CVE-2021-31862

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

6.1AI score0.03985EPSS
SaveExploits2References2
Positive Technologies
Positive Technologies
•added 2021/10/29 12:00 a.m.•2 views

PT-2021-19555

Name of the Vulnerable Software and Affected Versions: SysAid version 20.4.74 Description: The issue allows for cross-site scripting XSS attacks via the stamp parameter in the "KeepAlive.jsp" page without requiring any authentication. This means an attacker can inject malicious scripts into the...

6.1CVSS0.03985EPSS
SaveExploits2References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/29 12:00 a.m.•3 views

CVE-2021-31862: Improper Neutralization of Input During Web Page Generation

SysAid 20.4.74 allows XSS via the KeepAlive.jsp stamp parameter without any authentication...

6.1CVSS5.8AI score0.03985EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2021/07/22 12:00 a.m.•24 views

Sysaid Technologies SysAid 跨站脚本漏洞

Sysaid Technologies SysAid is a suite of IT service management solutions from SysAid Technologies Sysaid Technologies, Israel. A cross-site scripting vulnerability exists in SysAid version 20.3.64 b14, which allows an attacker to trigger an XSS vulnerability via "/KeepAlive.jsp?stamp= URI"...

6.1CVSS5.9AI score0.0247EPSS
SaveExploits2References2
Rows per page
Query Builder