CVE-2015-7370 in Adserver

Sumário

de MITRE

Multiple cross-site scripting (XSS) vulnerabilities in open-flash-chart.swf in Open Flash Chart 2, as used in the VideoAds plugin in Revive Adserver before 3.2.2, allow remote attackers to inject arbitrary web script or HTML via the (1) id or (2) data-file parameter.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Reservar: 25/09/2015
• Divulgação: 14/10/2015
• Moderação: aceite
• Entrada: VDB-78467
• CPE: pronto
• CWE: CWE-79 (confirmado)
• CVSS: 4.3 (NVD)
• EPSS: 0.02239
• KEV: não
• Atividades: muito baixo
• Sector: Telecommunication, Transportation

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-7370
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-7370
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-7370/