CVE-2020-35727
Published Jan 11, 2021Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseDirs.do file via the…
Vendor/product archive
quest / policy_authority_for_unified_communications CVEs
Beta · best-effort13 CVEs tagged to quest / policy_authority_for_unified_communications — 1 Critical, 0 High, 12 Medium, 0 Low, 0 Unrated.
CVE-2020-35726
Published Jan 11, 2021Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/Applications/Reports…
CVE-2020-35725
Published Jan 11, 2021Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/index.jsp file via t…
CVE-2020-35724
Published Jan 11, 2021Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err…
CVE-2020-35723
Published Jan 11, 2021Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the ReportPreview.do file via t…
CVE-2020-35722
Published Jan 11, 2021CSRF in Web Compliance Manager in Quest Policy Authority 8.1.2.200 allows remote attackers to force user modification/creation via a specially crafted link to the submitUser.jsp f…
CVE-2020-35721
Published Jan 11, 2021Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseAssets.do file via th…
CVE-2020-35720
Published Jan 11, 2021Stored XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to store malicious code in multiple fields (first name, last name, and logon name) when creating or modifyin…
CVE-2020-35719
Published Jan 11, 2021Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/Applications/Search/…
CVE-2020-35206
Published Jan 11, 2021Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the…
CVE-2020-35205
Published Jan 11, 2021Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbound connections via…
CVE-2020-35204
Published Jan 11, 2021Reflected XSS in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the PolicyAuthority/Common/Fol…
CVE-2020-35203
Published Jan 11, 2021Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the…
Showing 1-13 of 13 CVEsPage 1 of 1