Accela Civic Platform
4 CVEs affecting Accela Civic Platform. Latest disclosed: 2021-06-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-34369 | Medium | 6.5 | 2021-06-09 | portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a modified contactSe… |
CVE-2021-34370 | Medium | 6.1 | 2021-06-09 | Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are… |
CVE-2021-33904 | Medium | 6.1 | 2021-06-07 | In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable… |
CVE-2016-5660 | Medium | 6.1 | 2016-07-15 | Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web… |