Vulnerabilities > Aternity > Medium

DATE CVE VULNERABILITY TITLE RISK
2016-09-29 CVE-2016-5061 Cross-site Scripting vulnerability in Aternity 9.0
Multiple cross-site scripting (XSS) vulnerabilities in the web server in Aternity before 9.0.1 allow remote attackers to inject arbitrary web script or HTML via the (1) HTTPAgent, (2) MacAgent, (3) getExternalURL, or (4) retrieveTrustedUrl page.
network
low complexity
aternity CWE-79
6.1