CVE-2026-124498 | Convene Azeus Convene Board Management Portal 7.0.2.7_3 p72 dummy_launcher.jsp REDIRECT_URL cross site scripting

SecurityVulns
Yanac

A vulnerability was found in Convene Azeus Convene Board Management Portal 7.0.2.7_3 p72. It has been declared as problematic. The impacted element is an unknown function of the file /jsp/ge/dummy_launcher.jsp. Executing a manipulation of the argument REDIRECT_URL can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-124498. The attack can be launched remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More