Vulnerabilities

TI-2013-03130 CVE-2013-3584 · GHSA-fvxp-92ph-hh83

Cross-site scripting (XSS) vulnerability in Corporater EPM Suite allows remote attackers…

LOW 22

Cross-site scripting (XSS) vulnerability in Corporater EPM Suite allows remote attackers to inject arbitrary web script or HTML via the customerId parameter to an unspecified component.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01012 Published 2013-08-28 No fix listed CWE-79

TI-2013-03129 CVE-2013-3583 · GHSA-hgpv-fxq6-hr54

Cross-site request forgery (CSRF) vulnerability in saveProperties.html in Corporater EPM…

LOW 31

Cross-site request forgery (CSRF) vulnerability in saveProperties.html in Corporater EPM Suite allows remote attackers to hijack the authentication of arbitrary users for requests that change passwords.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.00619 Published 2013-08-28 No fix listed CWE-352

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Corporater EPM Suite allows remote attackers…

Cross-site request forgery (CSRF) vulnerability in saveProperties.html in Corporater EPM…