CVE-2018-17184

Name of the Vulnerable Software and Affected Versions No specific software or versions mentioned

Description A malicious user with sufficient administration entitlements can inject html-like elements containing JavaScript statements into various fields, such as Connector names, Report names, AnyTypeClass keys, and Policy descriptions. When another user with sufficient administration entitlements edits one of these entities via the Admin Console, the injected JavaScript code is executed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.