exploitDog

CVE-2015-2850

Опубликовано: 07 июл. 2015

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

Ссылки

http://www.kb.cert.org/vuls/id/485324
Third Party Advisory
US Government Resource
http://www.kb.cert.org/vuls/id/485324
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:antlabs:inngate_ig_3.01_e:-:*:*:*:*:*:*:*

cpe:2.3:h:antlabs:inngate_ig_3.10_e:-:*:*:*:*:*:*:*

cpe:2.3:h:antlabs:inngate_ig_3.10_m:-:*:*:*:*:*:*:*

cpe:2.3:h:antlabs:inngate_ig_3100:-:*:*:*:*:*:*:*

cpe:2.3:h:antlabs:inngate_sg_4:-:*:*:*:*:*:*:*

cpe:2.3:h:antlabs:inngate_ssg_4:-:*:*:*:*:*:*:*

EPSS

Процентиль: 75%

0.00909

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-67xf-j6pp-53w9

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in index-login.ant in the ANTlabs InnGate firmware on IG 3100, InnGate 3.01 E, InnGate 3.10 E, InnGate 3.10 M, SG 4, and SSG 4 devices allows remote attackers to inject arbitrary web script or HTML via the msg parameter.

EPSS

Процентиль: 75%

0.00909

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79