CVE-2018-16607 in Open-AudIT Professional

Riassunto

di MITRE

Cross-site scripting (XSS) vulnerability in the Orgs Page in Open-AudIT Professional edition in 2.2.7 allows remote attackers to inject arbitrary web script via the Orgs name field.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 06/09/2018
• Divulgazione: 19/09/2018
• Moderazione: accettato
• Voce: VDB-124259
• CPE: pronto
• CWE: CWE-79 (confermato)
• CVSS: 5.4 (NVD)
• EPSS: 0.00653
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2018-16607
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-16607
• CVE Details: https://www.cvedetails.com/cve/CVE-2018-16607/