https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 07:14:09 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-258994 EUVD-2026-258994 https://cve.radiocsirt.org/vuln/euvd-2026-258994 https://cve.radiocsirt.org/vuln/fkie_cve-2023-49111 <p>For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack can be performed on the login page &#34;login.html&#34;. This is possible due to the request parameter &#34;message&#34; values being directly included in a JavaScript block in the response. This is especially critical in business environments using AD SSO authentication, e.g. via ADFS, where attackers could potentially steal AD passwords.</p> <p>This issue affects Kiuwan SAST: &lt;master.1808.p685.q13371</p> <p>For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack can be performed on the login page &#34;login.html&#34;. This is possible due to the request parameter &#34;message&#34; values being directly included in a JavaScript block in the response. This is especially critical in business environments using AD SSO authentication, e.g. via ADFS, where attackers could potentially steal AD passwords.</p> <p>This issue affects Kiuwan SAST: &lt;master.1808.p685.q13371</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-49111 https://cve.radiocsirt.org/vuln/ghsa-39wq-w29m-4ccv <p>For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack can be performed on the login page &#34;login.html&#34;. This is possible due to the request parameter &#34;message&#34; values being directly included in a JavaScript block in the response. This is especially critical in business environments using AD SSO authentication, e.g. via ADFS, where attackers could potentially steal AD passwords.</p> <p>This issue affects Kiuwan SAST: &lt;master.1808.p685.q13371</p> <p>For Kiuwan installations with SSO (single sign-on) enabled, an unauthenticated reflected cross-site scripting attack can be performed on the login page &#34;login.html&#34;. This is possible due to the request parameter &#34;message&#34; values being directly included in a JavaScript block in the response. This is especially critical in business environments using AD SSO authentication, e.g. via ADFS, where attackers could potentially steal AD passwords.</p> <p>This issue affects Kiuwan SAST: &lt;master.1808.p685.q13371</p> https://cve.radiocsirt.org/vuln/ghsa-39wq-w29m-4ccv https://cve.radiocsirt.org/vuln/gsd-2023-49111 gsd-2023-49111 https://cve.radiocsirt.org/vuln/gsd-2023-49111