Approved changes feed: RSS · Atom

cpe:2.3:a:geni:portal:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGeni (f650c971-f3aa-5ee3-96c3-6e9d53deffa2)
ProductPortal (301969db-fb5e-5e50-bcd5-33648b6ace66)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36654 vulnerable 2026-06-08 05:25:49.318316 GENI Portal sliceresource.php no_invocation_id_error cross site scripting
LOW (3.5)
A vulnerability classified as problematic has been found in GENI Portal. This affects the function no_invocation_id_error of the file portal/www/portal/sliceresource.php. The manipulation of the argument invocation_id/invocation_user leads to cross site scripting. It is possible to initiate the attack remotely. The patch is named 39a96fb4b822bd3497442a96135de498d4a81337. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218475.
Published: 2023-01-18T07:58:05.039Z
Updated: 2024-08-04T17:30:08.365Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-36653 vulnerable 2026-06-08 05:25:49.316640 GENI Portal error-text.php cross site scripting
LOW (3.5)
A vulnerability was found in GENI Portal. It has been rated as problematic. Affected by this issue is some unknown functionality of the file portal/www/portal/error-text.php. The manipulation of the argument error leads to cross site scripting. The attack may be launched remotely. The patch is identified as c2356cc41260551073bfaa3a94d1ab074f554938. It is recommended to apply a patch to fix this issue. VDB-218474 is the identifier assigned to this vulnerability.
Published: 2023-01-18T07:58:04.096Z
Updated: 2024-08-04T17:30:08.527Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.