Quest Policy Authority For Unified Communications
13 CVEs affecting Quest Policy Authority For Unified Communications. Latest disclosed: 2021-01-11. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-35205 | Critical | 9.8 | 2021-01-11 | Server Side Request Forgery (SSRF) in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to scan internal ports and make outbo… |
CVE-2020-35722 | Medium | 6.5 | 2021-01-11 | CSRF in Web Compliance Manager in Quest Policy Authority 8.1.2.200 allows remote attackers to force user modification/creation via a specially crafted link to… |
CVE-2020-35726 | Medium | 6.1 | 2021-01-11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/… |
CVE-2020-35725 | Medium | 6.1 | 2021-01-11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/… |
CVE-2020-35719 | Medium | 6.1 | 2021-01-11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/… |
CVE-2020-35206 | Medium | 6.1 | 2021-01-11 | Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially… |
CVE-2020-35204 | Medium | 6.1 | 2021-01-11 | Reflected XSS in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the Policy… |
CVE-2020-35203 | Medium | 6.1 | 2021-01-11 | Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially… |
CVE-2020-35727 | Medium | 5.4 | 2021-01-11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseD… |
CVE-2020-35724 | Medium | 5.4 | 2021-01-11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.j… |
CVE-2020-35723 | Medium | 5.4 | 2021-01-11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the ReportP… |
CVE-2020-35721 | Medium | 5.4 | 2021-01-11 | Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the BrowseA… |
CVE-2020-35720 | Medium | 5.4 | 2021-01-11 | Stored XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to store malicious code in multiple fields (first name, last name, and logon name) when… |