Vulnerabilities (CVE)

Filtered by vendor Connectwise Subscribe
Filtered by product Manage
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-11727 1 Connectwise 1 Manage 2017-08-04 4.3 MEDIUM 6.1 MEDIUM
services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon field) on victims who click on a crafted link, aka XSS.