EUVD-2018-19606

Malware in sbrugna...

Eramba 'advanced_filter' parameter cross-site scripting vulnerability

Eramba is an open source, enterprise-level IT governance application from Eramba UK. The program features IT security, compliance auditing and analysis, and more. A cross-site scripting vulnerability exists in reviews/filterIndex/ThirdPartyRiskReview in Eramba e version 1.0.6.033, which stems fro...

Cross site scripting

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...

CVE-2018-7894

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...

CVE-2018-7894

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...

CVE-2018-7894

CVE-2018-7894 affects Eramba e1.0.6.033, with a Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advanced_filter parameter. The issue is documented across multiple sources (NVD entry for CVE-2018-7894 and related Red Hat/CNVD records) and is described as: an XSS vulnerability cau...

PT-2018-18311

Name of the Vulnerable Software and Affected Versions: Eramba version 1.0.6.033 Description: The issue concerns a Reflected XSS in the reviews/filterIndex/ThirdPartyRiskReview endpoint via the advanced filter parameter, also known as the Search Parameter. Recommendations: For Eramba version...

CVE-2018-7894: Improper Neutralization of Input During Web Page Generation

Eramba e1.0.6.033 has Reflected XSS in reviews/filterIndex/ThirdPartyRiskReview via the advancedfilter parameter aka the Search Parameter...