CVE-2020-35203 in Policy Authorityالمعلومات

الملخص

بحسب MITRE • 11/01/2021

** UNSUPPORTED WHEN ASSIGNED ** Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the initFile.jsp file via the msg parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

حجز

12/12/2020

إفشاء

11/01/2021

الاعتدال

تمت الموافقة

إدخال

VDB-167532

EPSS

0.01326

KEV

لا

النشاطات

منخفض جدًا

المصادر

Want to stay up to date on a daily basis?

Enable the mail alert feature now!