CVE-2019-18207

In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the…

published October 30, 2019

CVSS
—
EPSS
1%
Percentile
43.0
In the wild
Unconfirmed
What it is

In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the InfoBusiness Web Component. The payload will be triggered every time a user browses the reports page.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00516 · 43.0th percentile
Published
2019-10-30T18:33Z
EPSS history
Timeline
  • 30 OCT 18:33Z
    In Zucchetti InfoBusiness before and including 4.4.1, an authenticated user can inject client-side code due to improper validation of the Title field in the…
    cvelistv5