ByteOS

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-0.51% / 39.44%

||

7 Day CHG+0.11%

Published-09 Jun, 2026 | 17:05

Updated-23 Jun, 2026 | 17:44

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Product-sharepoint_server Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Enterprise Server 2016

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-45468

Matching Score-10

Matching Score-10

CVSS Score-4.6||MEDIUM

EPSS-0.51% / 39.17%

||

7 Day CHG+0.11%

Published-09 Jun, 2026 | 17:04

Updated-23 Jun, 2026 | 17:43

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Product-sharepoint_server Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Enterprise Server 2016

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-1101

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.63% / 73.07%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-28 Feb, 2025 | 20:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-1099, CVE-2020-1100, CVE-2020-1106.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-45481

Matching Score-10

Matching Score-10

CVSS Score-7.3||HIGH

EPSS-0.69% / 47.89%

||

7 Day CHG+0.21%

Published-09 Jun, 2026 | 17:05

Updated-23 Jun, 2026 | 17:45

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Product-sharepoint_server Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Enterprise Server 2016

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-45467

Matching Score-10

Matching Score-10

CVSS Score-4.6||MEDIUM

EPSS-0.51% / 39.17%

||

7 Day CHG+0.11%

Published-09 Jun, 2026 | 17:04

Updated-23 Jun, 2026 | 17:43

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Product-sharepoint_server Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Enterprise Server 2016

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-45483

Matching Score-10

Matching Score-10

CVSS Score-4.6||MEDIUM

EPSS-0.51% / 39.17%

||

7 Day CHG+0.23%

Published-09 Jun, 2026 | 17:04

Updated-23 Jun, 2026 | 17:43

Microsoft Office Project Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office Project Server allows an authorized attacker to perform spoofing over a network.

Product-sharepoint_server Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Enterprise Server 2016

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-20945

Matching Score-10

Matching Score-10

CVSS Score-4.6||MEDIUM

EPSS-25.08% / 97.65%

||

7 Day CHG~0.00%

Published-14 Apr, 2026 | 16:56

Updated-19 Jun, 2026 | 16:07

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Product-sharepoint_server Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Enterprise Server 2016

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-1107

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.41% / 69.29%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:53

Updated-04 Aug, 2024 | 06:25

A spoofing vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft SharePoint Spoofing Vulnerability'. This CVE ID is unique from CVE-2020-1104, CVE-2020-1105.

Product-sharepoint_server sharepoint_foundation sharepoint_enterprise_server Microsoft SharePoint Server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-45479

Matching Score-10

Matching Score-10

CVSS Score-4.6||MEDIUM

EPSS-0.51% / 39.17%

||

7 Day CHG+0.11%

Published-09 Jun, 2026 | 17:04

Updated-23 Jun, 2026 | 17:43

Microsoft SharePoint Server Spoofing Vulnerability

Improper neutralization of input during web page generation ('cross-site scripting') in Microsoft Office SharePoint allows an authorized attacker to perform spoofing over a network.

Product-sharepoint_server Microsoft SharePoint Server 2019 Microsoft SharePoint Server Subscription Edition Microsoft SharePoint Enterprise Server 2016

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-1063

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.41% / 69.29%

||

7 Day CHG~0.00%

Published-21 May, 2020 | 22:52

Updated-04 Aug, 2024 | 06:25

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

Product-dynamics_365 Microsoft Dynamics 365 (on-premises)

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-4364

Matching Score-10

Assigner-IBM Corporation

Product-verify_identity_access_container verify_identity_access security_verify_access_container security_verify_access Verify Identity Access Security Verify Access Container Security Verify Access Verify Identity Access Container

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.09% / 0.68%

||

7 Day CHG~0.00%

Published-01 Apr, 2026 | 20:34

Updated-07 Apr, 2026 | 16:34

Security Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Verify Identity Access Container 11.0 through 11.0.2 and IBM Security Verify Access Container 10.0 through 10.0.9.1 and IBM Verify Identity Access 11.0 through 11.0.2 and IBM Security Verify Access 10.0 through 10.0.9.1 allows certificate listings retrieved via a browser session to return a JSON payload while incorrectly specifying the response Content-Type as text/html. Because the content is delivered with an HTML MIME type, browsers may interpret the JSON data as executable script under certain conditions. This creates an opportunity for JavaScript injection, potentially leading to cross-site scripting (XSS).

Vendor-IBM Corporation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0978

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.52% / 71.26%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:13

Updated-28 Feb, 2025 | 20:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-1243

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.21% / 10.69%

||

7 Day CHG~0.00%

Published-02 Apr, 2026 | 00:14

Updated-07 Apr, 2026 | 16:20

IBM Content Navigator is affected by , a Cross-Site Scripting (XSS) vulnerability

IBM Content Navigator 3.0.15, 3.1.0, and 3.2.0 is vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Vendor-Linux Kernel Organization, Inc Microsoft Corporation IBM Corporation

Product-linux_kernel aix content_navigator windows Content Navigator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-1049

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.47% / 70.50%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:13

Updated-04 Aug, 2024 | 06:25

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'. This CVE ID is unique from CVE-2020-1050.

Product-dynamics_365_server Dynamics 365 Server, version 9.0 (on-premises)

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0893

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.30% / 66.73%

||

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0894.

Product-sharepoint_enterprise_server sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0795

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.55% / 71.79%

||

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-28 Feb, 2025 | 21:15

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0891.

Product-sharepoint_enterprise_server sharepoint_foundation business_productivity_servers Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft Business Productivity Servers

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0700

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.33% / 67.35%

||

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-04 Aug, 2024 | 06:11

A Cross-site Scripting (XSS) vulnerability exists when Azure DevOps Server does not properly sanitize user provided input, aka 'Azure DevOps Server Cross-site Scripting Vulnerability'.

Product-azure_devops_server team_foundation_server Azure DevOps Server 2019 Update 1.1 Team Foundation Server 2018 Team Foundation Server Azure DevOps Server Azure DevOps Server 2019

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-10146

Matching Score-10

Assigner-CERT/CC

Matching Score-10

Assigner-CERT/CC

CVSS Score-5.7||MEDIUM

EPSS-1.89% / 76.92%

||

7 Day CHG~0.00%

Published-09 Dec, 2020 | 00:30

Updated-16 Sep, 2024 | 23:01

Microsoft Teams displayName stored cross-site scripting vulnerability

The Microsoft Teams online service contains a stored cross-site scripting vulnerability in the displayName parameter that can be exploited on Teams clients to obtain sensitive information such as authentication tokens and to possibly execute arbitrary commands. This vulnerability was fixed for all Teams users in the online service on or around October 2020.

Product-teams Teams

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0925

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.52% / 71.26%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0891

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.51% / 71.11%

||

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-28 Feb, 2025 | 21:15

This vulnerability is caused when SharePoint Server does not properly sanitize a specially crafted request to an affected SharePoint server.An authenticated attacker could exploit this vulnerability by sending a specially crafted request to an affected SharePoint server, aka 'Microsoft SharePoint Reflective XSS Vulnerability'. This CVE ID is unique from CVE-2020-0795.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-44200

Matching Score-10

Assigner-Acronis International GmbH

Vendor-Acronis (Acronis International GmbH)Linux Kernel Organization, Inc Microsoft Corporation

Matching Score-10

Assigner-Acronis International GmbH

CVSS Score-5.4||MEDIUM

EPSS-0.45% / 35.85%

||

7 Day CHG~0.00%

Published-29 Nov, 2021 | 18:19

Updated-16 Sep, 2024 | 22:36

Self cross-site scripting (XSS) was possible on devices page

Self cross-site scripting (XSS) was possible on devices page. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 28035

Product-cyber_protect windows linux_kernel Acronis Cyber Protect 15

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0927

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.52% / 71.37%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0954

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.52% / 71.26%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:13

Updated-28 Feb, 2025 | 20:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0973, CVE-2020-0978.

Product-project_server sharepoint_enterprise_server sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server Microsoft Project Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0656

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.47% / 70.50%

||

7 Day CHG~0.00%

Published-14 Jan, 2020 | 23:11

Updated-14 Nov, 2025 | 19:44

A cross site scripting vulnerability exists when Microsoft Dynamics 365 (on-premises) does not properly sanitize a specially crafted web request to an affected Dynamics server, aka 'Microsoft Dynamics 365 (On-Premise) Cross Site Scripting Vulnerability'.

Product-dynamics_365 Dynamics 365 Field Service (on-premises) v7 series

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0923

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.52% / 71.26%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2026-0835

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.21% / 11.07%

||

7 Day CHG~0.00%

Published-13 Mar, 2026 | 18:57

Updated-20 Mar, 2026 | 19:18

IBM Sterling B2B Integrator and IBM Sterling File Gateway 6.1.0.0 through 6.1.2.7_2, 6.2.0.0 through 6.2.0.5_1, 6.2.1.0 through 6.2.1.1_1, and 6.2.2.0 are vulnerable to cross-site scripting. This vulnerability allows an authenticated user to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Vendor-IBM Corporation

Product-sterling_b2b_integrator sterling_file_gateway Sterling B2B Integrator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20351

Matching Score-10

Assigner-IBM Corporation

Product-rational_doors_next_generation global_configuration_management engineering_test_management rational_quality_manager rational_team_concert engineering_workflow_management doors_next engineering_lifecycle_management engineering_requirements_quality_assistant_on-premises Rational Quality Manager Rational DOORS Next Generation Engineering Workflow Management Engineering Lifecycle Optimization Engineering Test Management Rational Team Concert

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.54% / 41.25%

||

7 Day CHG~0.00%

Published-04 Mar, 2021 | 19:05

Updated-17 Sep, 2024 | 00:10

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194708.

Vendor-IBM Corporation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20484

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.48% / 37.66%

||

7 Day CHG~0.00%

Published-23 Sep, 2021 | 17:10

Updated-16 Sep, 2024 | 22:16

IBM Sterling File Gateway 2.2.0.0 through 6.1.0.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 197666.

Vendor-IBM Corporation

Product-sterling_file_gateway Sterling File Gateway

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20528

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.62%

||

7 Day CHG~0.00%

Published-19 May, 2021 | 19:40

Updated-17 Sep, 2024 | 02:32

IBM Control Center 6.2.0.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198761.

Vendor-IBM Corporation

Product-control_center Control Center

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20363

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.61%

||

7 Day CHG~0.00%

Published-13 Jul, 2021 | 16:10

Updated-16 Sep, 2024 | 17:08

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195034.

Vendor-IBM Corporation

Product-cloud_pak_for_applications Cloud Pak for Applications

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0973

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.52% / 71.26%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:13

Updated-28 Feb, 2025 | 20:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20338

Matching Score-10

Assigner-IBM Corporation

Product-rational_doors_next_generation rational_engineering_lifecycle_manager engineering_test_management rational_quality_manager engineering_lifecycle_optimization_-_publishing removable_media_manager engineering_lifecycle_optimization_-_engineering_insights collaborative_lifecycle_management engineering_lifecycle_management Rational Quality Manager Rational DOORS Next Generation Rational Rhapsody Model Manager Rational Collaborative Lifecycle Management Engineering Lifecycle Optimization Rational Engineering Lifecycle Manager Engineering Test Management

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.61%

||

7 Day CHG~0.00%

Published-02 Jun, 2021 | 20:40

Updated-16 Sep, 2024 | 16:27

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194449.

Vendor-IBM Corporation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0926

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.70% / 74.16%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0930

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.52% / 71.26%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0924, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20550

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.62%

||

7 Day CHG~0.00%

Published-27 Apr, 2021 | 16:32

Updated-16 Sep, 2024 | 16:53

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199168.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-content_navigator windows aix linux_kernel Content Navigator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20357

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.66% / 46.96%

||

7 Day CHG~0.00%

Published-27 Jan, 2021 | 16:15

Updated-16 Sep, 2024 | 22:41

IBM Jazz Foundation products is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194963.

Vendor-IBM Corporation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20477

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.95%

||

7 Day CHG~0.00%

Published-29 Jun, 2021 | 15:50

Updated-17 Sep, 2024 | 01:47

IBM Planning Analytics 2.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196949.

Vendor-IBM Corporation

Product-planning_analytics Planning Analytics

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20507

Matching Score-10

Assigner-IBM Corporation

Product-rational_doors_next_generation rational_engineering_lifecycle_manager rational_team_concert engineering_lifecycle_optimization rational_collaborative_lifecycle_management engineering_workflow_management engineering_requirements_quality_assistant_on-premises Rational DOORS Next Generation Engineering Workflow Management Rational Collaborative Lifecycle Management Engineering Lifecycle Optimization Rational Engineering Lifecycle Manager Rational Team Concert

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.62%

||

7 Day CHG~0.00%

Published-19 Jul, 2021 | 16:00

Updated-17 Sep, 2024 | 03:12

IBM Jazz Foundation and IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198235.

Vendor-IBM Corporation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0894

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.30% / 66.73%

||

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0893.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20447

Matching Score-10

Assigner-IBM Corporation

Product-rational_engineering_lifecycle_manager engineering_insights rational_team_concert engineering_workflow_management engineering_lifecycle_management engineering_requirements_quality_assistant_on-premises Engineering Workflow Management Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.95%

||

7 Day CHG~0.00%

Published-30 Mar, 2021 | 16:45

Updated-16 Sep, 2024 | 22:40

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 196623.

Vendor-IBM Corporation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20553

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.26% / 16.87%

||

7 Day CHG~0.00%

Published-18 Dec, 2024 | 23:39

Updated-19 Dec, 2024 | 16:39

IBM Sterling B2B Integrator Standard Edition cross-site scripting

IBM Sterling B2B Integrator Standard Edition 5.2.0.0 through 6.1.1.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session.

Vendor-IBM Corporation

Product-Sterling B2B Integrator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20504

Matching Score-10

Assigner-IBM Corporation

Product-rational_engineering_lifecycle_manager engineering_insights rational_team_concert engineering_workflow_management engineering_lifecycle_management engineering_requirements_quality_assistant_on-premises Engineering Workflow Management Rational Engineering Lifecycle Manager Rational Team Concert Engineering Lifecycle Optimization

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.95%

||

7 Day CHG~0.00%

Published-30 Mar, 2021 | 16:45

Updated-17 Sep, 2024 | 00:46

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198231.

Vendor-IBM Corporation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20520

Matching Score-10

Assigner-IBM Corporation

Product-rational_engineering_lifecycle_manager engineering_insights rational_team_concert engineering_workflow_management engineering_lifecycle_management engineering_requirements_quality_assistant_on-premises Engineering Workflow Management Rational Engineering Lifecycle Manager Engineering Lifecycle Optimization Rational Team Concert

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.95%

||

7 Day CHG~0.00%

Published-30 Mar, 2021 | 16:45

Updated-16 Sep, 2024 | 18:48

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 198572.

Vendor-IBM Corporation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0924

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.83% / 76.07%

||

7 Day CHG~0.00%

Published-15 Apr, 2020 | 15:12

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft SharePoint Server does not properly sanitize a specially crafted web request to an affected SharePoint server, aka 'Microsoft Office SharePoint XSS Vulnerability'. This CVE ID is unique from CVE-2020-0923, CVE-2020-0925, CVE-2020-0926, CVE-2020-0927, CVE-2020-0930, CVE-2020-0933, CVE-2020-0954, CVE-2020-0973, CVE-2020-0978.

Product-sharepoint_enterprise_server sharepoint_foundation sharepoint_server Microsoft SharePoint Enterprise Server Microsoft SharePoint Foundation Microsoft SharePoint Server

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20340

Matching Score-10

Assigner-IBM Corporation

Product-rational_doors_next_generation global_configuration_management engineering_test_management rational_quality_manager rational_team_concert engineering_workflow_management doors_next engineering_lifecycle_management engineering_requirements_quality_assistant_on-premises Rational Quality Manager Rational DOORS Next Generation Engineering Workflow Management Engineering Lifecycle Optimization Engineering Test Management Rational Team Concert

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.54% / 41.12%

||

7 Day CHG~0.00%

Published-04 Mar, 2021 | 19:05

Updated-16 Sep, 2024 | 19:35

IBM Engineering products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194451.

Vendor-IBM Corporation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20549

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.62%

||

7 Day CHG~0.00%

Published-27 Apr, 2021 | 16:32

Updated-17 Sep, 2024 | 04:04

IBM Content Navigator 3.0.CD is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 199167.

Vendor-IBM Corporation Linux Kernel Organization, Inc Microsoft Corporation

Product-content_navigator windows aix linux_kernel Content Navigator

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20352

Matching Score-10

Assigner-IBM Corporation

Product-rational_engineering_lifecycle_manager engineering_insights rational_team_concert engineering_workflow_management engineering_lifecycle_management engineering_requirements_quality_assistant_on-premises Engineering Workflow Management Rational Engineering Lifecycle Manager Engineering Lifecycle Optimization Rational Team Concert

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.95%

||

7 Day CHG~0.00%

Published-30 Mar, 2021 | 16:45

Updated-16 Sep, 2024 | 22:24

IBM Jazz Foundation Products are vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 194710.

Vendor-IBM Corporation

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20365

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.74%

||

7 Day CHG~0.00%

Published-13 Jul, 2021 | 16:10

Updated-16 Sep, 2024 | 18:59

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195036.

Vendor-IBM Corporation

Product-cloud_pak_for_applications Cloud Pak for Applications

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2021-20364

Matching Score-10

Assigner-IBM Corporation

Matching Score-10

Assigner-IBM Corporation

CVSS Score-5.4||MEDIUM

EPSS-0.50% / 38.61%

||

7 Day CHG~0.00%

Published-13 Jul, 2021 | 16:10

Updated-16 Sep, 2024 | 22:57

IBM Cloud Pak for Applications 4.3 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 195035.

Vendor-IBM Corporation

Product-cloud_pak_for_applications Cloud Pak for Applications

CWE ID-CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

CVE-2020-0903

Matching Score-10

Matching Score-10

CVSS Score-5.4||MEDIUM

EPSS-1.65% / 73.46%

||

7 Day CHG~0.00%

Published-12 Mar, 2020 | 15:48

Updated-28 Feb, 2025 | 21:15

A cross-site-scripting (XSS) vulnerability exists when Microsoft Exchange Server does not properly sanitize a specially crafted web request to an affected Exchange server, aka 'Microsoft Exchange Server Spoofing Vulnerability'.