ByteOS

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.11% / 77.26%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:52

Updated-04 Aug, 2024 | 06:25

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

Product-dynamics_365 Microsoft Dynamics 365 (on-premises)

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-1055

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.71% / 71.42%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:52

Updated-28 Feb, 2025 | 20:15

A cross-site-scripting (XSS) vulnerability exists when Active Directory Federation Services (ADFS) does not properly sanitize user inputs, aka 'Microsoft Active Directory Federation Services Cross-Site Scripting Vulnerability'.

Product-windows_server_2019 windows_server_2016 windows_10 Windows Server, version 1909 (Server Core installation)Windows 10 Version 1903 for ARM64-based Systems Windows 10 Version 1909 for 32-bit Systems Windows Server Windows 10 Version 1903 for x64-based Systems Windows Server, version 1903 (Server Core installation)Windows 10 Version 1903 for 32-bit Systems Windows 10 Version 1909 for ARM64-based Systems Windows 10 Version 1909 for x64-based Systems Windows

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2023-4594

Matching Score-10

Assigner-Spanish National Cybersecurity Institute, S.A. (INCIBE)

Matching Score-10

Assigner-Spanish National Cybersecurity Institute, S.A. (INCIBE)

CVSS Score-6.1||MEDIUM

EPSS-0.08% / 23.78%

||

7 Day CHG~0.00%

Published-23 Nov, 2023 | 12:35

Updated-21 Nov, 2024 | 19:31

Cross-site Scripting in BVRP Software SLmail

Stored XSS vulnerability. This vulnerability could allow an attacker to store a malicious JavaScript payload via GET and POST methods on multiple parameters in the MailAdmin_dll.htm file.

Vendor-seattlelab BVRP Software Microsoft Corporation

Product-windows slmail SLmail

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-1107

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.68% / 70.54%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-04 Aug, 2024 | 06:25

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1104, CVE-2020-1105.

Product-sharepoint_server sharepoint_foundation sharepoint_enterprise_server Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-1104

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.61% / 68.67%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-04 Aug, 2024 | 06:25

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1105, CVE-2020-1107.

Product-sharepoint_server sharepoint_foundation sharepoint_enterprise_server Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-1105

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.61% / 68.67%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-04 Aug, 2024 | 06:25

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1104, CVE-2020-1107.

Product-sharepoint_server sharepoint_enterprise_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-1148

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.68% / 70.54%

||

7 Day CHG~0.00%

Published-09 Jun, 2020 | 19:43

Updated-04 Aug, 2024 | 06:25

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1289.

Product-sharepoint_server sharepoint_enterprise_server Microsoft SharePoint Server Microsoft SharePoint Enterprise Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2023-44207

Matching Score-10

Assigner-Acronis International GmbH

Vendor-Acronis (Acronis International GmbH)Linux Kernel Organization, Inc Microsoft Corporation

Matching Score-10

Assigner-Acronis International GmbH

CVSS Score-6.7||MEDIUM

EPSS-0.21% / 43.45%

||

7 Day CHG~0.00%

Published-27 Sep, 2023 | 12:02

Updated-23 Sep, 2024 | 20:08

Stored cross-site scripting (XSS) vulnerability in protection plan name. The following products are affected: Acronis Cyber Protect 15 (Linux, Windows) before build 35979.

Product-cyber_protect windows linux_kernel Acronis Cyber Protect 15

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-1106

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.85% / 82.27%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1100, CVE-2020-1101.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20446

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.14% / 35.08%

||

7 Day CHG~0.00%

Published-18 Feb, 2021 | 15:10

Updated-16 Sep, 2024 | 19:05

IBM Maximo for Civil Infrastructure 7.6.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196622.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-windows maximo_for_civil_infrastructure linux_kernel Maximo for Civil Infrastructure

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20549

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.16% / 37.24%

||

7 Day CHG~0.00%

Published-27 Apr, 2021 | 16:32

Updated-17 Sep, 2024 | 04:04

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199167.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-content_navigator windows aix linux_kernel Content Navigator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20562

Matching Score-10

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.71% / 71.46%

||

7 Day CHG~0.00%

Published-27 Jul, 2021 | 11:25

Updated-16 Sep, 2024 | 16:48

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 5.2.6.5_3 and 6.1.0.0 through 6.1.0.2 vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199232.

Product-sterling_b2b_integrator solaris linux_kernel i hp-ux windows aix Sterling B2B Integrator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20448

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.14% / 35.08%

||

7 Day CHG~0.00%

Published-27 Apr, 2021 | 16:32

Updated-16 Sep, 2024 | 23:31

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196624.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-content_navigator windows aix linux_kernel Content Navigator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20550

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.16% / 37.24%

||

7 Day CHG~0.00%

Published-27 Apr, 2021 | 16:32

Updated-16 Sep, 2024 | 16:53

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199168.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-content_navigator windows aix linux_kernel Content Navigator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2023-43015

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.06% / 18.70%

||

7 Day CHG~0.00%

Published-01 Dec, 2023 | 19:39

Updated-21 Nov, 2024 | 18:59

IBM InfoSphere Information Server cross-site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266064.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-aix windows infosphere_information_server linux_kernel InfoSphere Information Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2023-42029

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-4.8||MEDIUM

EPSS-0.06% / 18.46%

||

7 Day CHG~0.00%

Published-02 Nov, 2023 | 23:44

Updated-05 Sep, 2024 | 14:34

IBM CICS TX cross-site scripting

IBM CICS TX Standard 11.1, Advanced 10.1, 11.1, and TXSeries for Multiplatforms 8.1, 8.2, 9.1 are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 266059.

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc

Product-txseries_for_multiplatforms linux_kernel cics_tx hp-ux windows aix CICS TX Advanced CICS TX Standard TXSeries for Multiplatforms

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0973

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.82% / 73.51%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:13

Updated-28 Feb, 2025 | 20:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2019-1262

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.48% / 64.13%

||

7 Day CHG~0.00%

Published-11 Sep, 2019 | 21:24

Updated-04 Aug, 2024 | 18:13

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.

Product-sharepoint_foundation Microsoft SharePoint Foundation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2023-42007

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.05% / 14.62%

||

7 Day CHG~0.00%

Published-10 Apr, 2025 | 13:24

Updated-17 Aug, 2025 | 00:09

IBM Sterling Control Center cross-site scripting

IBM Sterling Control Center 6.2.1, 6.3.1, and 6.4.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Vendor-IBM Corporation Microsoft Corporation Linux Kernel Organization, Inc

Product-linux_kernel windows sterling_control_center aix linux_on_ibm_z Sterling Control Center

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2019-0831

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.48% / 64.36%

||

7 Day CHG~0.00%

Published-09 Apr, 2019 | 20:16

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2019-0830.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2019-0963

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.58% / 67.87%

||

7 Day CHG~0.00%

Published-16 May, 2019 | 18:24

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'.

Product-sharepoint_foundation Microsoft SharePoint Foundation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2023-42009

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.07% / 22.83%

||

7 Day CHG~0.00%

Published-01 Dec, 2023 | 20:52

Updated-02 Aug, 2024 | 19:16

IBM InfoSphere Information Server cross-site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265504.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-aix windows infosphere_information_server linux_kernel InfoSphere Information Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0694

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.92% / 75.07%

||

7 Day CHG~0.00%

Published-11 Feb, 2020 | 21:23

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0693.

Product-sharepoint_enterprise_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2023-42022

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.06% / 19.02%

||

7 Day CHG~0.00%

Published-01 Dec, 2023 | 20:57

Updated-02 Aug, 2024 | 19:16

IBM InfoSphere Information Server cross-site scripting

IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 265938.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-aix windows infosphere_information_server linux_kernel InfoSphere Information Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0927

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.82% / 73.51%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0923

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.82% / 73.51%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-4933

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.19% / 40.74%

||

7 Day CHG~0.00%

Published-18 Feb, 2021 | 15:10

Updated-16 Sep, 2024 | 18:34

IBM Jazz Reporting Service 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191751.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-jazz_reporting_service windows linux_kernel Jazz Reporting Service

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-4268

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.24% / 46.90%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:13

Updated-16 Sep, 2024 | 23:30

IBM QRadar 7.3.0 to 7.3.3 Patch 2 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-ForceID: 175841.

Vendor-IBM Corporation Linux Kernel Organization, Inc

Product-qradar_security_information_and_event_manager linux_kernel QRadar Qradar

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-4935

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.14% / 35.08%

||

7 Day CHG~0.00%

Published-01 Jul, 2021 | 15:40

Updated-16 Sep, 2024 | 22:02

IBM Datacap Fastdoc Capture (IBM Datacap Navigator 9.1.7 ) is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 191753.

Vendor-Microsoft Corporation IBM Corporation

Product-windows datacap_navigator Datacap Navigator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-4578

Matching Score-10

Assigner-IBM Corporation

Vendor-Microsoft Corporation HP Inc.IBM Corporation Linux Kernel Organization, Inc Oracle Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.29% / 51.73%

||

7 Day CHG~0.00%

Published-10 Sep, 2020 | 16:50

Updated-16 Sep, 2024 | 17:37

IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 184433.

Product-solaris linux_kernel websphere_application_server i hp-ux windows z\/os aix WebSphere Application Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-36115

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.18% / 39.99%

||

7 Day CHG~0.00%

Published-28 Jan, 2021 | 19:15

Updated-04 Aug, 2024 | 17:16

Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'.

Vendor-egavilanmedia n/a Microsoft Corporation

Product-windows phpcrud n/a

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2022-43850

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.02% / 2.61%

||

7 Day CHG~0.00%

Published-14 Apr, 2025 | 20:44

Updated-15 Aug, 2025 | 15:20

IBM Aspera Console cross-site scripting

IBM Aspera Console 3.4.0 through 3.4.4 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Vendor-IBM Corporation Microsoft Corporation Linux Kernel Organization, Inc

Product-aspera_console windows linux_kernel Aspera Console

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2025-3630

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-6.4||MEDIUM

EPSS-0.03% / 7.22%

||

7 Day CHG~0.00%

Published-08 Jul, 2025 | 14:51

Updated-24 Aug, 2025 | 11:31

IBM Sterling B2B Integrator and IBM Sterling File Gateway cross-site scripting

IBM Sterling B2B Integrator 6.0.0.0 through 6.1.2.6, 6.2.0.0 through 6.2.0.4, IBM Sterling File Gateway 6.0.0.0 through 6.1.2.6, and 6.2.0.0 through 6.2.0.4 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Vendor-Linux Kernel Organization, Inc IBM Corporation Microsoft Corporation

Product-aix sterling_b2b_integrator windows sterling_file_gateway linux_kernel Sterling B2B Integrator Sterling File Gateway

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2025-33097

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-6.4||MEDIUM

EPSS-0.03% / 7.22%

||

7 Day CHG~0.00%

Published-15 Jul, 2025 | 14:29

Updated-18 Aug, 2025 | 01:34

IBM QRadar SIEM cross-site scripting

IBM QRadar SIEM 7.5 - 7.5.0 UP12 IF02 is vulnerable to stored cross-site scripting. This vulnerability allows authenticated users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Vendor-IBM Corporation Linux Kernel Organization, Inc

Product-linux_kernel qradar_security_information_and_event_manager QRadar SIEM

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2025-33138

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.04% / 12.32%

||

7 Day CHG~0.00%

Published-22 May, 2025 | 16:37

Updated-26 Aug, 2025 | 15:04

IBM Aspera Faspex HTML injection

IBM Aspera Faspex 5.0.0 through 5.0.12 is vulnerable to HTML injection. A remote attacker could inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site.

Vendor-IBM Corporation Linux Kernel Organization, Inc

Product-linux_kernel aspera_faspex Aspera Faspex

CWE ID-CWE-80

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2025-3423

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.05% / 14.62%

||

7 Day CHG~0.00%

Published-13 Apr, 2025 | 11:56

Updated-18 Jul, 2025 | 18:07

IBM Aspera Faspex 5 cross-site scripting

IBM Aspera Faspex 5.0.0 through 5.0.11 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Vendor-IBM Corporation Linux Kernel Organization, Inc

Product-aspera_faspex linux_kernel Aspera Faspex

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0894

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.90% / 74.70%

||

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0893.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0656

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.72% / 71.48%

||

7 Day CHG~0.00%

Published-14 Jan, 2020 | 23:11

Updated-04 Aug, 2024 | 06:11

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

Product-dynamics_365 Dynamics 365 Field Service (on-premises) v7 series

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-10146

Matching Score-10

Assigner-CERT/CC

Matching Score-10

Assigner-CERT/CC

CVSS Score-5.7||MEDIUM

EPSS-0.51% / 65.53%

||

7 Day CHG~0.00%

Published-09 Dec, 2020 | 00:30

Updated-16 Sep, 2024 | 23:01

Microsoft Teams displayName stored cross-site scripting vulnerability

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for all Teams users in the online service on or around October 2020.

Product-teams Teams

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0891

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.62% / 69.15%

||

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-28 Feb, 2025 | 21:15

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0795.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0954

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.82% / 73.51%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:13

Updated-28 Feb, 2025 | 20:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0973, CVE-2020-0978.

Product-project_server sharepoint_enterprise_server sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server Microsoft Project Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0933

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.82% / 73.51%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0893

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.90% / 74.70%

||

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0894.

Product-sharepoint_enterprise_server sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0903

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.73% / 71.80%

||

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.

Product-exchange_server Microsoft Exchange Server 2019 Cumulative Update 4 Microsoft Exchange Server 2016 Cumulative Update 15 Microsoft Exchange Server 2019 Cumulative Update 3 Microsoft Exchange Server 2016 Cumulative Update 14

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0930

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.82% / 73.51%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0795

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.47% / 63.58%

||

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-28 Feb, 2025 | 21:15

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0891.

Product-sharepoint_enterprise_server sharepoint_foundation business_productivity_servers Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft Business Productivity Servers

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0978

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.82% / 73.51%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:13

Updated-28 Feb, 2025 | 20:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0924

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.10% / 77.16%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0925

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.82% / 73.51%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0693

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.70% / 71.02%

||

7 Day CHG~0.00%

Published-11 Feb, 2020 | 21:23

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0694.