CVE-2008-2929

Опубликовано: 29 авг. 2008

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in the adminutil library in the Directory Server Administration Express and Directory Server Gateway (DSGW) web interface in Red Hat Directory Server 7.1 before SP7 and 8 EL4 and EL5, and Fedora Directory Server, allow remote attackers to inject arbitrary web script or HTML via input values that use % (percent) escaping.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:fedora:directory_server:*:*:*:*:*:*:*:*

cpe:2.3:a:redhat:directory_server:7.1:sp1:*:*:*:*:*:*

cpe:2.3:a:redhat:directory_server:7.1:sp2:*:*:*:*:*:*

cpe:2.3:a:redhat:directory_server:7.1:sp3:*:*:*:*:*:*

cpe:2.3:a:redhat:directory_server:7.1:sp4:*:*:*:*:*:*

cpe:2.3:a:redhat:directory_server:7.1:sp5:*:*:*:*:*:*

cpe:2.3:a:redhat:directory_server:7.1:sp6:*:*:*:*:*:*

cpe:2.3:a:redhat:directory_server:8.0:el4:*:*:*:*:*:*

cpe:2.3:a:redhat:directory_server:8.0:el5:*:*:*:*:*:*

EPSS

Процентиль: 69%

0.00627

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2008-2929

redhat

около 17 лет назад

GHSA-p2p9-vhrp-wv8p

github

больше 3 лет назад