Infovista operates a web-based portal platform for network and service management that, despite a narrow product portfolio, occupies a prominent position in telecommunications infrastructure as a visibility and orchestration layer for service providers. The vendor's vulnerability disclosures center on its flagship VistaPortal and PortalSE products and recur predominantly through application-layer input-handling issues, particularly cross-site scripting weaknesses arising from improper neutralization during web-page generation. This concentration reflects the inherent risks of user-facing web applications that process and display network and customer data without sufficient output encoding. Defenders should treat Infovista advisories as applicable to exposed management interfaces and incorporate them into change-control cycles for infrastructure visibility systems; current severity, exploitation, and exposure figures are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Infovista over time
Signals from CVEs in this vendor scope (28 CVEs).
28 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-19822MEDIUM Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SharedCriteria.jsp" has reflected XSS via the ConnPoolName or Group | Dec 17, 2018 | 6.1 | 22 | NO | NO |
CVE-2018-19821MEDIUM Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/SecurityPolicies.jsp" has reflected XSS via the ConnPoolName parame | Dec 17, 2018 | 6.1 | 21 | NO | NO |
CVE-2018-19820MEDIUM Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Roles.jsp" has reflected XSS via the ConnPoolName parameter. | Dec 17, 2018 | 6.1 | 21 | NO | NO |
CVE-2018-19817MEDIUM Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/AdminAuthorisationFrame.jsp" has reflected XSS via the ConnPoolName | Dec 17, 2018 | 6.1 | 21 | NO | NO |
CVE-2018-19816MEDIUM Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/categorytree/ChooseCategory.jsp" has reflected XSS via the ConnPool | Dec 17, 2018 | 6.1 | 21 | NO | NO |
CVE-2018-19811MEDIUM Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/Import.jsp" has reflected XSS via the ConnPoolName parameter. | Dec 17, 2018 | 6.1 | 21 | NO | NO |
CVE-2018-19809MEDIUM Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "/VPortal/mgtconsole/GroupCopy.jsp" has reflected XSS via the ConnPoolName, GroupId, or | Dec 17, 2018 | 6.1 | 21 | NO | NO |
CVE-2018-19775MEDIUM Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "Variables.jsp" has reflected XSS via the ConnPoolName and GroupId parameters. | Dec 17, 2018 | 6.1 | 21 | NO | NO |
CVE-2018-19774MEDIUM Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "PresentSpace.jsp" has reflected XSS via the GroupId and ConnPoolName parameters. | Dec 17, 2018 | 6.1 | 21 | NO | NO |
CVE-2018-19773MEDIUM Cross Site Scripting exists in InfoVista VistaPortal SE Version 5.1 (build 51029). The page "EditCurrentUser.jsp" has reflected XSS via the GroupId and ConnPoolName parameters. | Dec 17, 2018 | 6.1 | 21 | NO | NO |
Signals from CVEs in this vendor scope (28 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Infovista.
Media articles that mention a CVE ID that affects a product developed by Infovista — matched by CVE ID, not by vendor name.