6.1
CVE-2020-13168
- EPSS 0.53%
- Veröffentlicht 02.10.2020 09:15:13
- Zuletzt bearbeitet 21.11.2024 05:00:47
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Sysaid ≫ Sysaid On-premises Version5.0
Sysaid ≫ Sysaid On-premises Version5.5.06
Sysaid ≫ Sysaid On-premises Version5.6
Sysaid ≫ Sysaid On-premises Version6.0.9
Sysaid ≫ Sysaid On-premises Version6.5
Sysaid ≫ Sysaid On-premises Version7.0
Sysaid ≫ Sysaid On-premises Version7.5
Sysaid ≫ Sysaid On-premises Version8.0
Sysaid ≫ Sysaid On-premises Version8.1
Sysaid ≫ Sysaid On-premises Version8.5
Sysaid ≫ Sysaid On-premises Version9.0.10
Sysaid ≫ Sysaid On-premises Version9.0.30
Sysaid ≫ Sysaid On-premises Version9.0.40
Sysaid ≫ Sysaid On-premises Version9.0.52
Sysaid ≫ Sysaid On-premises Version9.0.53
Sysaid ≫ Sysaid On-premises Version9.1.0
Sysaid ≫ Sysaid On-premises Version14.1
Sysaid ≫ Sysaid On-premises Version14.2
Sysaid ≫ Sysaid On-premises Version14.3
Sysaid ≫ Sysaid On-premises Version14.4.00
Sysaid ≫ Sysaid On-premises Version14.4.1
Sysaid ≫ Sysaid On-premises Version14.4.2
Sysaid ≫ Sysaid On-premises Version14.4.3
Sysaid ≫ Sysaid On-premises Version15.1.20
Sysaid ≫ Sysaid On-premises Version15.1.30
Sysaid ≫ Sysaid On-premises Version15.1.50
Sysaid ≫ Sysaid On-premises Version15.1.70
Sysaid ≫ Sysaid On-premises Version15.2.03
Sysaid ≫ Sysaid On-premises Version15.2.04
Sysaid ≫ Sysaid On-premises Version15.2.05
Sysaid ≫ Sysaid On-premises Version16.3.16
Sysaid ≫ Sysaid On-premises Version16.3.17
Sysaid ≫ Sysaid On-premises Version17.2.03
Sysaid ≫ Sysaid On-premises Version17.3.57
Sysaid ≫ Sysaid On-premises Version18.1.54
Sysaid ≫ Sysaid On-premises Version19.2
Sysaid ≫ Sysaid On-premises Version19.4
Sysaid ≫ Sysaidsy On-premises Version20.1.11 Updateb26
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.53% | 0.664 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.1 | 2.8 | 2.7 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.