CVE-2018-16607 in Open-AudIT Professional

Résumé

par MITRE

Cross-site scripting (XSS) vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Réserver: 06/09/2018
• Divulgation: 19/09/2018
• Modérer: accepté
• Entrée: VDB-124259
• CPE: prêt
• CWE: CWE-79 (confirmé)
• CVSS: 5.4 (NVD)
• EPSS: 0.00653
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-16607
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-16607
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-16607/