CVE-2018-19809 - Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029)

Back Back to CVE browser

MEDIUM

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029)

Published Dec 17, 2018

6.1

MEDIUM

CVSS 3.0

EPSS 1.08%

Description

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupCopy.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html
x_refsource_MISCExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2018/Dec/20
mailing-listx_refsource_FULLDISCExploitMailing ListThird Party Advisory

Link	Providers	Tags
http://packetstormsecurity.com/files/150690/VistaPortal-SE-5.1-Cross-Site-Scripting.html		x_refsource_MISCExploitThird Party AdvisoryVDB Entry
http://seclists.org/fulldisclosure/2018/Dec/20		mailing-listx_refsource_FULLDISCExploitMailing ListThird Party Advisory