CVE-2018-9155 in Open-AudIT Professional信息

摘要

由 MITRE

Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin->Logs section (with a logs?logs.type= URI) and the Manage->Attributes section (via the "Name (display)" field to the attributes/create URI).

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2018-03-31

披露

2018-04-12

管理

已接受

条目

VDB-116216

CPE

准备好

CWE

CWE-79 (已确认)

利用

下载

CVSS

5.4 (NVD)

EPSS

0.00455

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2018-9155
NVD	https://nvd.nist.gov/vuln/detail/CVE-2018-9155
CVE Details	https://www.cvedetails.com/cve/CVE-2018-9155/

◂ 上一步一览下一步 ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!