EUVD-2026-119757
GHSA-5ghx-pqw8-p76h
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain
-
AccessObtain low-privileged portal session
-
DeliveryCraft link with malicious REDIRECT_URL to dummy_launcher.jsp
-
ExploitDeliver link to victim user
-
ExecutionVictim clicks, reflected script executes in browser
-
ImpactHijack session actions in portal context
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V1 - Encoding and Sanitization Output encoding, context-aware escaping
MITRE ATT&CK
2 techniques across 2 tactics: Initial Access, Execution The technique list with ATT&CK links and the kill-chain view is part of the Basic plan and up. |
| Exploitation Conditions | Exploitation requires an attacker-influenced request to /jsp/ge/dummy_launcher.jsp with a manipulated REDIRECT_URL argument, which is reflected without proper encoding (reflected XSS). Per the CVSS vector, the attacker needs low-level privileges (PR:L - a valid low-privileged portal session) and the attack depends on victim user interaction (UI:P), typically following a crafted link. Impact is limited to the victim's browser session within the application (VI:L; no confidentiality or availability impact), and these authentication and user-interaction requirements meaningfully limit real-world exploitability. Affected build is Convene Azeus Convene Board Management Portal 7.0.2.7_3 p72. |
| Impact | This is a low-severity reflected cross-site scripting issue (CWE-79) in a niche enterprise board-management product, and the signals are consistent in pointing to low real-world priority. The provided CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N) yields a base score of only 2.0: network-reachable and low-complexity, but requiring low-level privileges (PR:L) and passive user interaction (UI:P), with impact limited to low integrity in the victim's browser context (VI:L) and no confidentiality or availability impact. The vuln.today decision label is 'monitor,' there is no CISA KEV listing, and no EPSS score was supplied. A public PoC reference exists (a GitHub gist) but the input explicitly states it is not verified as working exploit code, so exploitation status is best described as a public PoC reference that is not verified as working. The vendor was contacted and did not respond, so no patch is confirmed available - the main open question is remediation rather than exploitation urgency. Net: a genuine but low-risk flaw, appropriately deprioritized relative to high-CVSS/KEV issues. |
| Exploit ScenarioDerived | An attacker with a low-privileged authenticated session crafts a malicious link to /jsp/ge/dummy_launcher.jsp with a manipulated REDIRECT_URL parameter and lures a victim user into clicking it, causing attacker-controlled script to execute in the victim's browser within the Convene portal context. A public PoC reference (GitHub gist) exists but is not verified as a working exploit. The attack is remote but constrained by the need for a valid session and victim interaction. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Nov 08, 2026
Reflected cross-site scripting in the REDIRECT_URL parameter of /jsp/ge/dummy_launcher.jsp in Azeus Convene Board Management Portal 7.0.2.7_3 p72 lets an attacker who can induce a low-privileged portal user to follow a crafted link execute script in that user's browser session; the CVSS 4.0 score is 2.0 and the independent assessment scores it CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N. A public PoC reference exists (a GitHub gist) but is not verified as working exploit code, no active exploitation is confirmed, and the vuln.today priority is monitor. The vendor was contacted and did not respond, so no fixed version is identified in the supplied data.
RemediationAI
No vendor-released patch is identified in the available data, and the vendor did not respond to the disclosure; the advisory at https://vuldb.com/vuln/432803 is the vendor-facing reference to monitor along with https://vuldb.com/cve/CVE-2026-124498. Until a fix is published, the specific exposure is the /jsp/ge/dummy_launcher.jsp endpoint and its REDIRECT_URL argument, so restrict or block access to that JSP at the reverse proxy or WAF and reject REDIRECT_URL values that are not on a strict allowlist; the trade-off is that blocking the endpoint or tightening the parameter may break legitimate launcher or redirect behavior.
Affected VersionsENISA
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
The issue is CWE-79 reflected cross-site scripting in a JSP endpoint of the Azeus Convene Board Management Portal. The affected element is /jsp/ge/dummy_launcher.jsp, where manipulation of the REDIRECT_URL argument is reflected without proper encoding. The independent CVSS:3.1 vector requires low-level privileges (PR:L, a valid low-privileged portal session) and victim user interaction (UI:R), with scope changed (S:C) and limited integrity impact (VI:L; no confidentiality or availability impact). The CVSS 4.0 vector includes E:P (proof-of-concept), but the supplied POC field classifies the GitHub gist as a reference only, not verified as working exploit code. The named affected build is 7.0.2.7_3 p72; the CPE is a wildcard, so broader version coverage is not confirmed, and the sources do not describe the exact code path or whether the endpoint is reachable without authentication.
Know when Azeus Convene Board Management Portal gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Reflected XSS reachable over the network needs a low-privileged session (PR:L) and victim interaction (UI:R); script runs in the browser's security context (S:C) with limited confidentiality/integrity impact and no availability effect.
Primary rating from Vendor (VulDB).
CVSS VectorVendor: VulDB
Lifecycle Timeline
3DescriptionCVE.org
A vulnerability was determined in Convene Azeus Convene Board Management Portal 7.0.2.7_3 p72. The impacted element is an unknown function of the file /jsp/ge/dummy_launcher.jsp. Executing a manipulation of the argument REDIRECT_URL can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Threat Intelligence Overview
NVD
CVE.org
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Cross-Site Scripting occurs when an application accepts untrusted data and sends it to a web browser without proper validation or encoding.
Exploit-DB