CVE-2020-17457

https://notcve.org/view.php?id=CVE-2020-17457

Fujitsu ServerView Suite iRMC before 9.62F allows XSS. An authenticated attacker can store an XSS payload in the PSCU_FILE_INIT field of a Save Configuration XML document. The payload is triggered in the HTTP error response pages. Fujitsu ServerView Suite iRMC versiones anteriores a 9.62F, permite un ataque de tipo XSS. Un atacante autenticado puede almacenar una carga útil XSS en el campo PSCU_FILE_INIT de un documento XML de Save Configuration. • https://support.ts.fujitsu.com/IndexDownload.asp?Softwareguid=C67A44AE-B022-4150-8621-C4393C007ED9 https://www.gruppotim.it/redteam • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •