THREATINT

We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Zendesk (Helpdesk and Chat)

Ok

PUBLISHED

CVE-2020-35204

Reserved:2020-12-12
Published:2021-01-11
Updated:2024-06-10

Description

Reflected XSS in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the PolicyAuthority/Common/FolderControl.jsp file via the unqID parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References

https://un4gi.io/blog/multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications

https://clandestinelabs.io/security-advisories/advisory-multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications

cve.org CVE-2020-35204

nvd.nist.gov CVE-2020-35204

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2020-35204