CVE-2020-35206

MEDIUM 6.1CVE-2020-35206 · Published 11/01/2021 · updated 17/06/2026

In short

CVE-2020-35206 is a MEDIUM (CVSS 6.1) vulnerability affecting policy authority for unified communications (quest).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
policy authority for unified communications quest	`= 8.1.2.200`	No fix yet

Description

Reflected XSS in Web Compliance Manager in Quest Policy Authority version 8.1.2.200 allows attackers to inject malicious code into the browser via a specially crafted link to the cConn.jsp file via the ur parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References

More vulnerabilities in policy authority for unified communications

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

policy authority for unified communications

quest

= 8.1.2.200

No fix yet

Description

More vulnerabilities in policy authority for unified communications

See all →