{"id":"CVE-2018-14875","aliases":["EUVD-2018-6757","GHSA-w6hv-qv46-rvmf"],"status":"published","title":"An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1...","description":"An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter.","severity":{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00649,"percentile":0.51353,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2019-04-30T18:52:25Z","modified":"2026-06-17T01:41:48Z","products":[{"vendor":"polarisft","product":"intellect_core_banking"}],"references":[{"url":"https://neetech18.blogspot.com/2019/03/reflected-xss-vulnerability-in-polaris.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-14875"},{"url":"https://github.com/advisories/GHSA-w6hv-qv46-rvmf"}],"sources":{"cve":[{"id":"CVE-2018-14875","description":"An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter.","status":"published","published":"2019-04-30T18:52:25Z","modified":"2024-08-05T09:38:14.015Z","updated_at":"2026-11-02T14:35:00.589142Z"}],"euvd":[{"id":"EUVD-2018-6757","description":"An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter.","status":"published","published":"2019-04-30T18:52:25Z","modified":"2024-08-05T09:38:14Z","updated_at":"2026-11-03T02:39:45.703245Z"}],"ghsa":[{"id":"GHSA-w6hv-qv46-rvmf","title":"An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1...","description":"An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter.","status":"published","published":"2022-05-24T16:44:53Z","modified":"2024-04-04T00:18:29Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:55:49.472376Z"}],"nvd":[{"id":"CVE-2018-14875","description":"An issue was discovered in the Core and Portal modules in Polaris FT Intellect Core Banking 9.7.1. Reflected XSS exists with an authenticated session via the Customerid, formName, FrameId, or MODE parameter.","status":"published","published":"2019-04-30T19:29:02.11Z","modified":"2026-06-17T01:41:48.197Z","cvss":[{"version":"3.0","score":5.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":3.5,"vector":"AV:N/AC:M/Au:S/C:N/I:P/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:04:57.307075Z"}]}}