CVE-2020-35204: XSS
UNSUPPORTED WHEN ASSIGNED Reflected XSS in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the PolicyAuthority/Common/FolderControl.jsp file via the unqID parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-35204 vulnerability?
CVE-2020-35204 is a reflected cross-site scripting (XSS) vulnerability in Quest Policy Authority version 8.1.2.200.
How does CVE-2020-35204 vulnerability work?
Attackers can inject malicious code into the browser by sending a specially crafted link to the PolicyAuthority/Common/FolderControl.jsp file via the unqID parameter.
Which software version is affected by CVE-2020-35204 vulnerability?
Quest Policy Authority version 8.1.2.200 is affected by CVE-2020-35204 vulnerability.
What is the severity of CVE-2020-35204 vulnerability?
The severity of CVE-2020-35204 vulnerability is medium, with a CVSS score of 6.1.
How can the CVE-2020-35204 vulnerability be fixed?
To fix CVE-2020-35204 vulnerability, it is recommended to upgrade to a supported version of Quest Policy Authority or apply the relevant security patches.