Filtered by vendor Accela Subscriptions
Filtered by product Civic Platform Subscriptions
Total 4 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-34370 1 Accela 1 Civic Platform 2024-11-21 6.1 Medium
Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are unable to reproduce them with the available information.
CVE-2021-34369 1 Accela 1 Civic Platform 2024-11-21 6.5 Medium
portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a modified contactSeqNumber value. NOTE: the vendor states "the information that is being queried is authorized for an authenticated user of that application, so we consider this not applicable.
CVE-2021-33904 1 Accela 1 Civic Platform 2024-11-21 6.1 Medium
In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information.
CVE-2016-5660 1 Accela 1 Civic Platform 2024-11-21 6.1 Medium
Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter.