CVE-2020-35723: XSS
UNSUPPORTED WHEN ASSIGNED Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the ReportPreview.do file via the referer parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2020-35723.
What is the severity level of CVE-2020-35723?
CVE-2020-35723 has a severity level of medium.
How does the vulnerability affect Quest Policy Authority?
The vulnerability affects Quest Policy Authority version 8.1.2.200.
How can remote attackers exploit CVE-2020-35723?
Remote attackers can exploit CVE-2020-35723 by injecting malicious code into the browser via a specially crafted link to the ReportPreview.do file.
Are there any references for more information about CVE-2020-35723?
Yes, you can find more information about CVE-2020-35723 at the following references: [Reference 1](https://clandestinelabs.io/security-advisories/advisory-multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications), [Reference 2](https://un4gi.io/blog/multiple-vulnerabilities-in-quest-policy-authority-for-unified-communications).