• Skip to primary navigation
  • Skip to main content
CVE Vulnerability

CVE Vulnerability

  • CVE’s
  • Products
  • Vendors

CWE-79

CVE-2018-17147

February 26, 2023 by

Nagios XI before 5.5.4 has XSS in the auto login admin management page.

CVE-2018-1715

February 26, 2023 by

IBM Maximo Asset Management 7.6 through 7.6.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147003.

CVE-2018-17150

February 26, 2023 by

Intersystems Cache 2017.2.2.865.0 allows XSS.

CVE-2018-1716

February 26, 2023 by

IBM WebSphere Portal 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 147164.

CVE-2018-17167

February 26, 2023 by

PrinterOn Enterprise 4.1.4 suffers from multiple authenticated stored XSS vulnerabilities via the (1) “Machine Host Name” or “Server Serial Number” field in the clustering configuration, (2) “name” field in the Edit Group configuration, (3) “Rule Name” field in the Access Control configuration, (4) “Service Name” in the Service Configuration, or (5) First Name or Last Name field in the Edit Account configuration.

CVE-2018-17090

February 26, 2023 by

An issue was discovered in DonLinkage 6.6.8. The modules /pages/bazy/bazy_adresow.php and /pages/proxy/add.php are vulnerable to stored XSS that can be triggered by closing