Description
Cross site scripting vulnerability in web portal in Snow Software License Manager from version 9.0.0 up to and including 9.30.1 on Windows allows an authenticated user with high privileges to trigger cross site scripting attack via the web browser
References
https://community.snowsoftware.com/s/feed/0D56M00009gUexuSAC
Issue TrackingVendor Advisory
https://community.snowsoftware.com/s/feed/0D56M00009gUexuSAC
Issue TrackingVendor Advisory
CVSS impact metrics
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
4.8 · Medium
Information
Source identifier
Vulnerability status
Modified
Published
2023-08-11T10:15:09.637Z
2 years agoLast modified
2024-11-21T07:18:21.540Z
1 year ago