Lucene search
K

6 matches found

CNVD
CNVD
added 2020/03/31 12:0 a.m.2 views

Versiant LYNX Customer Service Portal Cross-Site Scripting Vulnerability

Versiant LYNX Customer Service Portal CSP is a customer service portal system from Versiant USA. A cross-site scripting vulnerability exists in Versiant LYNX Customer Service Portal CSP version 3.5.2. The vulnerability stems from a lack of proper validation of client data by the web application. ...

5.4CVSS6.3AI score0.00309EPSS
Exploits0
OSV
OSV
added 2020/03/30 10:15 p.m.2 views

CVE-2020-9055

Versiant LYNX Customer Service Portal CSP, version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or...

5.4CVSS5.7AI score0.00309EPSS
Exploits0References2
NVD
NVD
added 2020/03/30 10:15 p.m.9 views

CVE-2020-9055

Versiant LYNX Customer Service Portal CSP, version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or...

5.4CVSS4.3AI score0.00309EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/03/30 8:50 p.m.14 views

CVE-2020-9055 Versiant Lynx Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow an attacker to execute arbitrary JavaScript

Versiant LYNX Customer Service Portal CSP, version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or...

3.9CVSS5.1AI score0.00309EPSS
Exploits0References2
CVE
CVE
added 2020/03/30 8:50 p.m.66 views

CVE-2020-9055

Versiant LYNX CSP 3.5.2 is vulnerable to stored cross-site scripting due to insufficient input validation, enabling a local, authenticated attacker to inject JavaScript that is stored and executed for end users (possible redirects, session cookie hijacking, information disclosure). The issue is d...

5.4CVSS4.5AI score0.00309EPSS
Exploits0References2Affected Software1
CERT
CERT
added 2020/03/30 12:0 a.m.20 views

Versiant LYNX Customer Service Portal is vulnerable to stored cross-site scripting

Overview The Versiant LYNX Customer Service Portal version 3.5.2 is vulnerable to stored cross-site scripting, which may allow a local, authenticated attacker to execute arbitrary JavaScript. Description The Versiant LYNX Customer Service Portal CSP is a "full-service customer portal that provide...

5.4CVSS5.2AI score0.00309EPSS
Exploits0References6
Rows per page
Query Builder