Cross-site Scripting (XSS)

2020-08-0702:30:38

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

23.0%

JSON

cfme-gemset is vulnerable to cross-site scripting (XSS). The vulnerability exists in the report menu title.

CPENameOperatorVersion
v2v-conversion-hosteq1.15.0__1.el8ev
v2v-conversion-hosteq1.14.2__1.el8ev
cfme-applianceeq5.11.0.28__1.el8cf
cfme-applianceeq5.11.6.0__1.el8cf
cfme-applianceeq5.11.2.2__1.el8cf
cfme-applianceeq5.11.5.2__1.el8cf
cfme-applianceeq5.11.4.2__1.el8cf
cfme-applianceeq5.11.1.2__1.el8cf
cfme-applianceeq5.11.3.1__1.el8cf
cfme-amazon-smartstateeq5.11.6.0__1.el8cf

Name	Operator	Version
v2v-conversion-host	eq	1.15.0__1.el8ev
v2v-conversion-host	eq	1.14.2__1.el8ev
cfme-appliance	eq	5.11.0.28__1.el8cf
cfme-appliance	eq	5.11.6.0__1.el8cf
cfme-appliance	eq	5.11.2.2__1.el8cf
cfme-appliance	eq	5.11.5.2__1.el8cf
cfme-appliance	eq	5.11.4.2__1.el8cf
cfme-appliance	eq	5.11.1.2__1.el8cf
cfme-appliance	eq	5.11.3.1__1.el8cf
cfme-amazon-smartstate	eq	5.11.6.0__1.el8cf