exploitDog

CVE-2015-5375

Опубликовано: 28 сент. 2015

Источник: nvd

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in unspecified dialogs for printing content in the Front End in Open-Xchange Server 6 and OX App Suite before 6.22.8-rev8, 6.22.9 before 6.22.9-rev15m, 7.x before 7.6.1-rev25, and 7.6.2 before 7.6.2-rev20 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to object properties.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:open-xchange:open-xchange_appsuite:*:rev19:*:*:*:*:*:*

Версия до 7.6.2 (включая)

cpe:2.3:a:open-xchange:open-xchange_server:*:*:*:*:*:*:*:*

Версия до 6.0 (включая)

EPSS

Процентиль: 58%

0.00359

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-mjp2-jc3f-fh7r

github

больше 3 лет назад

Cross-site scripting (XSS) vulnerability in unspecified dialogs for printing content in the Front End in Open-Xchange Server 6 and OX App Suite before 6.22.8-rev8, 6.22.9 before 6.22.9-rev15m, 7.x before 7.6.1-rev25, and 7.6.2 before 7.6.2-rev20 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to object properties.

EPSS

Процентиль: 58%

0.00359

Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79