CVE-2004-0534

Опубликовано: 17 сент. 2004

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web script or HTML via document names when uploading a document.

Ссылки

http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0057.html
Patch
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026550.html
Patch
Vendor Advisory
http://secunia.com/advisories/12587/
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11209
https://exchange.xforce.ibmcloud.com/vulnerabilities/17419
http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0057.html
Patch
Vendor Advisory
http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026550.html
Patch
Vendor Advisory
http://secunia.com/advisories/12587/
Patch
Vendor Advisory
http://www.securityfocus.com/bid/11209
https://exchange.xforce.ibmcloud.com/vulnerabilities/17419

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:businessobjects:infoview:5.1.4:*:*:*:*:*:*:*

cpe:2.3:a:businessobjects:infoview:5.1.5:*:*:*:*:*:*:*

cpe:2.3:a:businessobjects:infoview:5.1.6:*:*:*:*:*:*:*

cpe:2.3:a:businessobjects:infoview:5.1.7:*:*:*:*:*:*:*

cpe:2.3:a:businessobjects:infoview:5.1.8:*:*:*:*:*:*:*

cpe:2.3:a:businessobjects:webintelligence:2.7:*:*:*:*:*:*:*

cpe:2.3:a:businessobjects:webintelligence:2.7.1:*:*:*:*:*:*:*

cpe:2.3:a:businessobjects:webintelligence:2.7.2:*:*:*:*:*:*:*

cpe:2.3:a:businessobjects:webintelligence:2.7.3:*:*:*:*:*:*:*

cpe:2.3:a:businessobjects:webintelligence:2.7.4:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00547

Низкий

4.3 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-45rq-wggf-p92p

github

больше 3 лет назад