CVE-2020-35724: XSS
UNSUPPORTED WHEN ASSIGNED Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the Error.jsp file via the err parameter (or indirectly via the cpr, tcp, or abs parameter). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2020-35724?
CVE-2020-35724 is a reflected XSS vulnerability in Quest Policy Authority 8.1.2.200 that allows remote attackers to inject malicious code into the browser using a specially crafted link.
How severe is CVE-2020-35724?
CVE-2020-35724 has a severity rating of medium with a score of 5.4.
How can an attacker exploit CVE-2020-35724?
An attacker can exploit CVE-2020-35724 by sending a specially crafted link to the Error.jsp file, containing the malicious code, to the victim.
What is the affected software version?
The affected software version is Quest Policy Authority 8.1.2.200.
Is there a fix for CVE-2020-35724?
Since the vulnerability is unsupported, there may not be an official fix available. It is recommended to upgrade to a supported version or apply any patches if provided.