漏洞标题
Sage X3 Syracuse在"编辑用户"页面上存在持久性XSS漏洞
漏洞描述信息
Sage X3 Syracuse在“编辑用户”页面上存在持久性XSS漏洞
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
漏洞类别
N/A
漏洞标题
Sage X3 Syracuse Persistent XSS in Edit User page
漏洞描述信息
Sage X3 Stored XSS Vulnerability on ‘Edit’ Page of User Profile. An authenticated user can pass XSS strings the "First Name," "Last Name," and "Email Address" fields of this web application component. Updates are available for on-premises versions of Version 12 (components shipped with Syracuse 12.10.0 and later) of Sage X3. Other on-premises versions of Sage X3 are unaffected or unsupported by the vendor.
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N
漏洞类别
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
漏洞标题
Sage Group Sage X3 跨站脚本漏洞
漏洞描述信息
Sage Group Sage X3是Sage Group公司的一个应用软件。针对成熟企业开发的企业资源规划产品。 Sage X3 存在跨站脚本漏洞，经过身份验证的用户可以将此 Web 应用程序组件的"First Name", "Last Name", "Email Address"字段传递给 XSS 字符串。
CVSS信息
N/A
漏洞类别
跨站脚本