Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “PresentSpace.jsp” has reflected XSS via the ConnPoolName and GroupId parameters.
CWE-79
CVE-2018-19768
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “SubPagePackages.jsp” has reflected XSS via the ConnPoolName and GroupId parameters.
CVE-2018-19769
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “UserProperties.jsp” has reflected XSS via the ConnPoolName parameter.
CVE-2018-19770
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “Users.jsp” has reflected XSS via the ConnPoolName parameter.
CVE-2018-19771
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “EditCurrentPool.jsp” has reflected XSS via the PropName parameter.
CVE-2018-19772
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “EditCurrentPresentSpace.jsp” has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.