CVE Daily

CVE-2018-19822

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029...

Medium CVSS 6.1

Overview

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SharedCriteria.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.

CWE: CWE-79 Published: 2018-12-17T15:29:02.030
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.1 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags