Majd

**Name of the Vulnerable Software and Affected Versions** Eastnets PaymentSafe version 2.5.26.0 **Description** A vulnerability was found in Eastnets PaymentSafe, affecting an unknown part of the file /directRouter.rfc of the component Edit Manual Reply Handler. The manipulation of the `Title` argument leads to basic cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** For Eastnets PaymentSafe version 2.5.26.0, as a temporary workaround, consider restricting access to the `Edit Manual Reply Handler` component until a patch is available. Avoid using the `Title` argument in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Eastnets PaymentSafe version 2.5.26.0 **Description** A problem has been found in Eastnets PaymentSafe, affecting some unknown functionality of the file /Default.aspx of the component URL Handler. The manipulation leads to improper authorization. The attack may be launched remotely. The vendor was contacted early about this disclosure but did not respond in any way. **Recommendations** As a temporary workaround, consider restricting access to the /Default.aspx file of the URL Handler component until a patch is available. Avoid using the vulnerable functionality of the URL Handler component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Eastnets PaymentSafe version 2.5.26.0 Description: A vulnerability was found in the BIC Search component of Eastnets PaymentSafe, which has been classified as problematic. The manipulation leads to cross-site scripting and can be initiated remotely. The vendor was contacted about this disclosure but did not respond. Recommendations: For Eastnets PaymentSafe version 2.5.26.0, as a temporary workaround, consider restricting access to the BIC Search component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.