Security Advisory

CVE-2020-9055

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-03-30 20:50:27
Last updated 2024-09-16 16:47:42
Assigner certcc
State PUBLISHED

Description

Versiant LYNX Customer Service Portal (CSP), version 3.5.2, is vulnerable to stored cross-site scripting, which could allow a local, authenticated attacker to insert malicious JavaScript that is stored and displayed to the end user. This could lead to website redirects, session cookie hijacking, or information disclosure.