Security Advisory

CVE-2018-12653

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-03-25 18:29:15
Last updated 2026-03-02 17:22:51
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

A Reflected Cross Site Scripting (XSS) vulnerability exists in Adrenalin HRMS 5.4.0. An attacker can input malicious JavaScript code in /RPT/SSRSDynamicEditReports.aspx via 'ReportId' parameter.