Lucene search
+L

8 matches found

CNVD
CNVD
•added 2020/03/31 12:00 a.m.•17 views

Versiant LYNX Customer Service Portal Cross-Site Scripting Vulnerability

Versiant LYNX Customer Service Portal CSP is a customer service portal system from Versiant USA. A cross-site scripting vulnerability exists in Versiant LYNX Customer Service Portal CSP version 3.5.2. The vulnerability stems from a lack of proper validation of client data by the web application. ...

5.4CVSS6.3AI score0.0051EPSS
SaveExploits0
OSV
OSV
•added 2020/03/30 10:15 p.m.•21 views

CVE-2020-9055

Versiant LYNX Customer Service Portal CSP, version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or...

5.4CVSS5.7AI score0.0051EPSS
SaveExploits0References2
NVD
NVD
•added 2020/03/30 10:15 p.m.•24 views

CVE-2020-9055

Versiant LYNX Customer Service Portal CSP, version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or...

5.4CVSS4.3AI score0.0051EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/03/30 8:50 p.m.•38 views

CVE-2020-9055 Versiant Lynx Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow an attacker to execute arbitrary JavaScript

Versiant LYNX Customer Service Portal CSP, version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or...

3.9CVSS5.1AI score0.0051EPSS
SaveExploits0References2
CVE
CVE
•added 2020/03/30 8:50 p.m.•87 views

CVE-2020-9055

Versiant LYNX CSP 3.5.2 is vulnerable to stored cross-site scripting due to insufficient input validation, enabling a local, authenticated attacker to inject JavaScript that is stored and executed for end users (possible redirects, session cookie hijacking, information disclosure). The issue is d...

5.4CVSS4.5AI score0.0051EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/03/30 12:00 a.m.•2 views

PT-2020-20463

Name of the Vulnerable Software and Affected Versions Versiant LYNX Customer Service Portal CSP version 3.5.2 Description The issue allows a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user, potentially leading to website redirects, session...

5.4CVSS0.0051EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/30 12:00 a.m.•6 views

CVE-2020-9055: Improper Neutralization of Input During Web Page Generation

Versiant LYNX Customer Service Portal CSP, version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or...

5.4CVSS6AI score0.0051EPSS
SaveExploits0References3
CERT
CERT
•added 2020/03/30 12:00 a.m.•40 views

Versiant LYNX Customer Service Portal is vulnerable to stored cross-site scripting

Overview The Versiant LYNX Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow a local, authenticated attacker to execute arbitrary JavaScript. Description The Versiant LYNX Customer Service Portal CSP is a "full-service customer portal that provide...

5.4CVSS5.2AI score0.0051EPSS
SaveExploits0References6
Rows per page
Query Builder