CVE-2022-2507: Improper Neutralization of Input During Web Page Generation

In affected versions of Octopus Deploy it is possible to render user supplied input into the webpage...

CVE-2022-42786: Improper Neutralization of Input During Web Page Generation

Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts or HTML via a crafted payload injected into the title of the configuration webpage...