CVE-2018-12903

In CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS via an account name on the create token screen, the…

published June 26, 2018

CVSS
—
EPSS
1%
Percentile
50.0
In the wild
Unconfirmed
What it is

In CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS via an account name on the create token screen, the VfManager.asmx SelectAccounts->DisplayName screen, a user's groups in ConfigurationPage, the Dialog Title field, and App Group Name in the Application Group Wizard.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00640 · 50.0th percentile
Published
2018-06-26T22:00Z
EPSS history
Timeline
  • 26 JUN 22:00Z
    In CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS via an account name on the create token screen, the…
    cvelistv5