medium6.1
CVE-2021-38560
Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx.
Impact
Ivanti Service Manager 2021.1 allows reflected XSS via the appName parameter associated with ConfigDB calls, such as in RelocateAttachments.aspx.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Service Manager | Version 2021.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://forums.ivanti.com/s/article/Ivanti-Service-Manager-Asset-Manager-2021-1-Release-Notes?language=en_US
- https://github.com/os909/iVANTI-CVE-2021-38560
- https://forums.ivanti.com/s/article/Ivanti-Service-Manager-Asset-Manager-2021-1-Release-Notes?language=en_US
- https://github.com/os909/iVANTI-CVE-2021-38560