PA
Product
Policy Authority For Unified Communications
13
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 12Low 0
Watch
Add Policy Authority For Unified Communications to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-35722 | 6.5 | Jan 11 | CSRF in Web Compliance Manager in Quest Policy Authority 8.1.2.200 allows remote attackers to force user modification/creation via a specially crafted link to the submitUser.jsp… Affected: 8.1.2.200 |
| CVE-2020-35726 | 6.1 | Jan 11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the… Affected: 8.1.2.200 |
| CVE-2020-35725 | 6.1 | Jan 11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/index.jsp file via… Affected: 8.1.2.200 |
| CVE-2020-35719 | 6.1 | Jan 11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the… Affected: 8.1.2.200 |
| CVE-2020-35206 | 6.1 | Jan 11 | Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the… Affected: 8.1.2.200 |
| CVE-2020-35204 | 6.1 | Jan 11 | Reflected XSS in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the… Affected: 8.1.2.200 |
| CVE-2020-35203 | 6.1 | Jan 11 | Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the… Affected: 8.1.2.200 |
| CVE-2020-35727 | 5.4 | Jan 11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseDirs.do file via the… Affected: 8.1.2.200 |
| CVE-2020-35724 | 5.4 | Jan 11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err… Affected: 8.1.2.200 |
| CVE-2020-35723 | 5.4 | Jan 11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the ReportPreview.do file via… Affected: 8.1.2.200 |
| CVE-2020-35721 | 5.4 | Jan 11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseAssets.do file via… Affected: 8.1.2.200 |
| CVE-2020-35720 | 5.4 | Jan 11 | Stored XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to store malicious code in multiple fields (first name, last name, and logon name) when creating or… Affected: 8.1.2.200 |
Showing 12