AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2018-12903

MEDIUM · CVSS 5.4 EPSS 0.64%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-06-26 · Last synced 2026-08-04

CyberRota Analysis

AI analysis pending.

CVE
CVE-2018-12903
Severity
MEDIUM
CVSS
5.4
EPSS
0.64%

Original NVD Description

In CyberArk Endpoint Privilege Manager (formerly Viewfinity) 10.2.1.603, there is persistent XSS via an account name on the create token screen, the VfManager.asmx SelectAccounts->DisplayName screen, a user's groups in ConfigurationPage, the Dialog Title field, and App Group Name in the Application Group Wizard.