CVE-2021-30650

A reflected cross-site scripting XSS vulnerability in the Symantec Layer7 API Management OAuth Toolkit OTK allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting...

PT-2022-10020

Name of the Vulnerable Software and Affected Versions Symantec Layer7 API Management OAuth Toolkit OTK affected versions not specified Description A reflected cross-site scripting XSS issue in the OTK allows a remote attacker to craft a malicious URL for the OTK web UI, targeting OTK users with...

CVE-2021-30650: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability in the Symantec Layer7 API Management OAuth Toolkit OTK allows a remote attacker to craft a malicious URL for the OTK web UI and target OTK users with phishing attacks or other social engineering techniques. A successful attack allows injecting...