Security Advisory

CVE-2017-11727

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-07-31 23:00:00
Last updated 2024-08-05 18:19:38
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

services/system_io/actionprocessor/Contact.rails in ConnectWise Manage 2017.5 allows arbitrary client-side JavaScript code execution (involving a ContactCommon field) on victims who click on a crafted link, aka XSS.