CVE-2020-35719

MEDIUM 6.1CVE-2020-35719 · Published 11/01/2021 · updated 17/06/2026

In short

CVE-2020-35719 is a MEDIUM (CVSS 6.1) vulnerability affecting policy authority for unified communications (quest).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
policy authority for unified communications quest	`= 8.1.2.200`	No fix yet

Description

Reflected XSS in Quest Policy Authority 8.1.2.200 allows remote attackers to inject malicious code into the browser via a specially crafted link to the /WebCM/Applications/Search/index.jsp file via the added parameter. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References

More vulnerabilities in policy authority for unified communications

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

policy authority for unified communications

quest

= 8.1.2.200

No fix yet

Description

More vulnerabilities in policy authority for unified communications

See all →