Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4vwq-m94q-6w28

Опубликовано: 18 мар. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 7.4
CVSS3: 6.1

Описание

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS). The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This issue affects ZENworks Service Desk: 25.2, 25.3.

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS). The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This issue affects ZENworks Service Desk: 25.2, 25.3.

EPSS

Процентиль: 4%
0.00137
Низкий

7.4 High

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-79

Связанные уязвимости

CVSS3: 6.1
nvd
6 месяцев назад

Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in OpenText™ ZENworks Service Desk allows Cross-Site Scripting (XSS). The vulnerability could allow an attacker to execute arbitrary JavaScript leading to unauthorized actions on behalf of the user.This issue affects ZENworks Service Desk: 25.2, 25.3.

EPSS

Процентиль: 4%
0.00137
Низкий

7.4 High

CVSS4

6.1 Medium

CVSS3

Дефекты

CWE-79