CVE-2020-13168

nvd nist

Published: Oct 2, 2020Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

SysAid 20.1.11b26 allows reflected XSS via the ForgotPassword.jsp accountid parameter.

Affected (38)

Products: Sysaid: Sysaid On Premises, Sysaidsy On Premises

Sysaid

2 products

Sysaid On Premises

Sysaidsy On Premises

Configuration A

38 vulnerable

Vulnerable Software	Affected Versions
Sysaid Sysaid On Premises	Version 14.1
Sysaid Sysaid On Premises	Version 14.2
Sysaid Sysaid On Premises	Version 14.3
Sysaid Sysaid On Premises	Version 14.4.00
Sysaid Sysaid On Premises	Version 14.4.1
Sysaid Sysaid On Premises	Version 14.4.2
Sysaid Sysaid On Premises	Version 14.4.3
Sysaid Sysaid On Premises	Version 15.1.20
Sysaid Sysaid On Premises	Version 15.1.30
Sysaid Sysaid On Premises	Version 15.1.50
Sysaid Sysaid On Premises	Version 15.1.70
Sysaid Sysaid On Premises	Version 15.2.03
Sysaid Sysaid On Premises	Version 15.2.04
Sysaid Sysaid On Premises	Version 15.2.05
Sysaid Sysaid On Premises	Version 16.3.16
Sysaid Sysaid On Premises	Version 16.3.17
Sysaid Sysaid On Premises	Version 17.2.03
Sysaid Sysaid On Premises	Version 17.3.57
Sysaid Sysaid On Premises	Version 18.1.54
Sysaid Sysaid On Premises	Version 19.2
Sysaid Sysaid On Premises	Version 19.4
Sysaid Sysaid On Premises	Version 5.0
Sysaid Sysaid On Premises	Version 5.5.06
Sysaid Sysaid On Premises	Version 5.6
Sysaid Sysaid On Premises	Version 6.0.9
Sysaid Sysaid On Premises	Version 6.5
Sysaid Sysaid On Premises	Version 7.0
Sysaid Sysaid On Premises	Version 7.5
Sysaid Sysaid On Premises	Version 8.0
Sysaid Sysaid On Premises	Version 8.1
Sysaid Sysaid On Premises	Version 8.5
Sysaid Sysaid On Premises	Version 9.0.10
Sysaid Sysaid On Premises	Version 9.0.30
Sysaid Sysaid On Premises	Version 9.0.40
Sysaid Sysaid On Premises	Version 9.0.52
Sysaid Sysaid On Premises	Version 9.0.53
Sysaid Sysaid On Premises	Version 9.1.0
Sysaid Sysaidsy On Premises	Version 20.1.11 b26