This document provides information about the different cross-site scripting (XSS) vulnerabilities detected in Mobile Device Manager Plus and provides the resolution to secure the server from these vulnerabilities
Vulnerability Description Detected by Fix available in build Fix released on XSS vulnerability in the product login screen Ken Pyle 92698 Nov 5, 2019 XSS vulnerability in the Geofencing page D_ J Dinesh 92666 Oct 29, 2019 XSS vulnerability in the Audit Log view D_ J Dinesh 92666 Oct 29, 2019 XSS vulnerability in the Upload App page Guhan Raja 92340 Aug 17, 2018
The fixes for the above mentioned vulnerabilities were released in the respective build numbers. If your MDM server is affected by the vulnerability or is running a version below the build number mentioned, upgrade your Mobile Device Manager Plus server to the appropriate build to resolve the issues.
For more updates on security fixes, follow our Vulnerability Updates forums.