Vendor CVEs

Infovista

All CVEs

28 total · sorted by risk

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2018-19822	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SharedCriteria.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
CVE-2018-19821	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SecurityPolicies.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19820	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Roles.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19819	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Rights.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19818	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Contacts.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19817	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/AdminAuthorisationFrame.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
CVE-2018-19816	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/categorytree/ChooseCategory.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19815	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/UserPopupAddNewProp.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19814	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscriptions.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
CVE-2018-19813	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscribers.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
CVE-2018-19812	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SubFolderPackages.jsp" has reflected XSS via the GroupId parameter.
CVE-2018-19811	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Import.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19810	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupMove.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter.
CVE-2018-19809	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupCopy.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter.
CVE-2018-19775	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Variables.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
CVE-2018-19774	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the GroupId and ConnPoolName parameters.
CVE-2018-19773	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentUser.jsp" has reflected XSS via the GroupId and ConnPoolName parameters.
CVE-2018-19772	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.
CVE-2018-19771	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPool.jsp" has reflected XSS via the PropName parameter.
CVE-2018-19770	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Users.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19769	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "UserProperties.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19768	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "SubPagePackages.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
CVE-2018-19767	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
CVE-2018-19766	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "GroupRessourceAdmin.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19765	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.
CVE-2018-19649	Infovista VistaPortal SE	Med	0.40	6.1	0.01	Dec 17, 2018	XSS exists in InfoVista VistaPortal SE Version 5.1 (build 51029). VPortal/mgtconsole/RolePermissions.jsp has reflected XSS via the ConnPoolName parameter.
CVE-2006-0862	Infovista Portalse		0.00	—	0.02	Feb 23, 2006	Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL.
CVE-2006-0863	Infovista Portalse		0.00	—	0.02	Feb 23, 2006	InfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive information by specifying a nonexistent server in the server field, which reveals the path in an error message.

CVE-2018-19822MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SharedCriteria.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
CVE-2018-19821MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SecurityPolicies.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19820MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Roles.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19819MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Rights.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19818MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Contacts.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19817MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/AdminAuthorisationFrame.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
CVE-2018-19816MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/categorytree/ChooseCategory.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19815MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/UserPopupAddNewProp.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19814MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscriptions.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
CVE-2018-19813MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Subscribers.jsp" has reflected XSS via the ConnPoolName or GroupId parameter.
CVE-2018-19812MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SubFolderPackages.jsp" has reflected XSS via the GroupId parameter.
CVE-2018-19811MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Import.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19810MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupMove.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter.
CVE-2018-19809MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupCopy.jsp" has reflected XSS via the ConnPoolName, GroupId, or type parameter.
CVE-2018-19775MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Variables.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
CVE-2018-19774MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the GroupId and ConnPoolName parameters.
CVE-2018-19773MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentUser.jsp" has reflected XSS via the GroupId and ConnPoolName parameters.
CVE-2018-19772MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.
CVE-2018-19771MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPool.jsp" has reflected XSS via the PropName parameter.
CVE-2018-19770MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Users.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19769MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "UserProperties.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19768MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "SubPagePackages.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
CVE-2018-19767MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the ConnPoolName and GroupId parameters.
CVE-2018-19766MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "GroupRessourceAdmin.jsp" has reflected XSS via the ConnPoolName parameter.
CVE-2018-19765MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentPresentSpace.jsp" has reflected XSS via the ConnPoolName, GroupId, and ParentId parameters.
CVE-2018-19649MedDec 17, 2018
Infovista
VistaPortal SE
risk 0.40cvss 6.1epss 0.01
XSS exists in InfoVista VistaPortal SE Version 5.1 (build 51029). VPortal/mgtconsole/RolePermissions.jsp has reflected XSS via the ConnPoolName parameter.
CVE-2006-0862Feb 23, 2006
Infovista
Portalse
risk 0.00cvss —epss 0.02
Unspecified vulnerability in InfoVista PortalSE 2.0 Build 20087 on Solaris 8 without the IV00038969 hotfix allows remote attackers to read arbitrary files via a crafted URL.
CVE-2006-0863Feb 23, 2006
Infovista
Portalse
risk 0.00cvss —epss 0.02
InfoVista PortalSE 2.0 Build 20087 on Solaris 8 allows remote attackers to obtain sensitive information by specifying a nonexistent server in the server field, which reveals the path in an error message.