Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
accela vulnerabilities and exploits
(subscribe to this query)
4.3
CVSSv2
CVE-2016-5660
Cross-site scripting (XSS) vulnerability in AttachmentsList.aspx in Accela Civic Platform Citizen Access portal allows remote malicious users to inject arbitrary web script or HTML via the iframeid parameter.
Accela Civic Platform -
4.3
CVSSv2
CVE-2021-34370
Accela Civic Platform up to and including 20.1 allows ssoAdapter/logoutAction.do successURL XSS. NOTE: the vendor states "there are configurable security flags and we are unable to reproduce them with the available information.
Accela Civic Platform
4
CVSSv2
CVE-2021-34369
portlets/contact/ref/refContactDetail.do in Accela Civic Platform up to and including 20.1 allows remote malicious users to obtain sensitive information via a modified contactSeqNumber value. NOTE: the vendor states "the information that is being queried is authorized for an...
Accela Civic Platform
4.3
CVSSv2
CVE-2021-33904
In Accela Civic Platform up to and including 21.1, the security/hostSignon.do parameter servProvCode is vulnerable to XSS. NOTE: The vendor states "there are configurable security flags and we are unable to reproduce them with the available information.
Accela Civic Platform
6.5
CVSSv2
CVE-2016-5661
Accela Civic Platform Citizen Access portal relies on the client to restrict file types for uploads, which allows remote authenticated users to execute arbitrary code via modified _EventArgument and filename parameters.
Accela Civic Platform Citizen Access Portal -
4.3
CVSSv2
CVE-2013-4711
Cross-site scripting (XSS) vulnerability in Accela BizSearch 3.2 on Linux and Solaris allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Accelatech Bizsearch 3.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
NULL pointer dereference
CVE-2023-52689
CVE-2024-23803
client side
CVE-2023-52696
information disclosure
CVE-2024-35843
CVE-2024-27130
CVE-2023-52697
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started