CVE-2024-52888

For an authenticated end-user the portal may run a script while attempting to display a directory or some file's properties.

CVE-2024-52887

Authenticated end-user may set a specially crafted SNX bookmark that can make their browser run a script while accessing their own bookmark list.