PT-2015-7290

CVE-2015-6530

·

Published

2015-08-20

·

Updated

2018-10-09

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions OpenText Secure MFT versions 2013 before 2013 R3 P6 OpenText Secure MFT versions 2014 before 2014 R2 P2
Description A cross-site scripting (XSS) issue allows remote attackers to inject arbitrary web script or HTML via the querytext parameter to the "userdashboard.jsp" endpoint.
Recommendations For OpenText Secure MFT versions 2013 before 2013 R3 P6, update to version 2013 R3 P6 or later. For OpenText Secure MFT versions 2014 before 2014 R2 P2, update to version 2014 R2 P2 or later.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2015-6530
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com