Proactive Risk Manager version 9.1.1.0 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities in the add/edit form fields, at the urls starting with the subpaths: /ar/config/configuation/ and /ar/config/risk-strategy-control/
History

Thu, 31 Oct 2024 18:15:00 +0000

Type Values Removed Values Added
First Time appeared Aci Worldwide
Aci Worldwide proactive Risk Manager
Weaknesses CWE-79
CPEs cpe:2.3:a:aci_worldwide:proactive_risk_manager:9.1.1.0:*:*:*:*:*:*:*
Vendors & Products Aci Worldwide
Aci Worldwide proactive Risk Manager
Metrics cvssV3_1

{'score': 5.4, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Wed, 30 Oct 2024 18:00:00 +0000

Type Values Removed Values Added
Description Proactive Risk Manager version 9.1.1.0 is affected by multiple Cross-Site Scripting (XSS) vulnerabilities in the add/edit form fields, at the urls starting with the subpaths: /ar/config/configuation/ and /ar/config/risk-strategy-control/
References

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2024-10-30T00:00:00

Updated: 2024-10-31T17:39:00.512Z

Reserved: 2024-10-08T00:00:00

Link: CVE-2024-48569

cve-icon Vulnrichment

Updated: 2024-10-31T17:38:53.375Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2024-10-30T18:15:07.567

Modified: 2024-11-01T12:57:03.417

Link: CVE-2024-48569

cve-icon Redhat

No data.