TI-2021-13405 CVE-2021-34370 · GHSA-m5fq-23j5-h7j7
Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS.
Priority MEDIUM 40
Accela Civic Platform through 20.1 allows ssoAdapter/logoutAction.do successURL XSS.
Accela
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Accela records in CISA KEVNo Accela vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Civic Platform · all components
TI-2021-13404 CVE-2021-34369 · GHSA-vf96-5gw2-gvj4
portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows…
Priority MEDIUM 40
portlets/contact/ref/refContactDetail.do in Accela Civic Platform through 20.1 allows remote attackers to obtain sensitive information via a modified contactSeqNumber value.
TI-2021-13216 CVE-2021-33904 · GHSA-w8x8-8rp7-r92g
In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode…
Priority MEDIUM 40
In Accela Civic Platform through 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS.
TI-2016-04916 CVE-2016-5660 · GHSA-7xrp-7vm5-7qjw
Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform…
Priority LOW 31
Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote attackers to inject arbitrary web script or HTML via the iframeid parameter.