CVE Vulnerability

CWE-79

CVE-2018-19767

by

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “PresentSpace.jsp” has reflected XSS via the ConnPoolName and GroupId parameters.

CVE-2018-19768

by

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “SubPagePackages.jsp” has reflected XSS via the ConnPoolName and GroupId parameters.

CVE-2018-19769

by

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “UserProperties.jsp” has reflected XSS via the ConnPoolName parameter.

CVE-2018-19770

by

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “Users.jsp” has reflected XSS via the ConnPoolName parameter.

CVE-2018-19771

by

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “EditCurrentPool.jsp” has reflected XSS via the PropName parameter.

CVE-2018-19772

by

Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page “EditCurrentPresentSpace.jsp” has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.