Tahmid Akbar Omim

**Name of the Vulnerable Software and Affected Versions** CFEngine Enterprise version 3.24.3 CFEngine Enterprise version 3.27.0 **Description** Cross-site Scripting (XSS) is possible, which occurs when an application includes untrusted data in a web page without proper validation or escaping, allowing an attacker to execute malicious scripts in the victim's browser. **Recommendations** Update CFEngine Enterprise version 3.24.3 to 3.24.4. Update CFEngine Enterprise version 3.27.0 to 3.27.1.

**Name of the Vulnerable Software and Affected Versions** CFEngine Enterprise versions prior to 3.21.8 CFEngine Enterprise versions prior to 3.24.3 CFEngine Enterprise versions prior to 3.27.0 **Description** Incorrect access control allows cross-site scripting (XSS), a technique where malicious scripts are injected into otherwise trusted websites. **Recommendations** Update to version 3.21.8. Update to version 3.24.3. Update to version 3.27.0.