CVE-2016-0246

Опубликовано: 22 окт. 2016

Источник: nvd

CVSS3: 6.1

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in IBM Security Guardium 8.2 before p310, 9.x through 9.5 before p700, and 10.x through 10.1 before p100 allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

Ссылки

http://www-01.ibm.com/support/docview.wss?uid=swg21990377
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93400
http://www-01.ibm.com/support/docview.wss?uid=swg21990377
Patch
Vendor Advisory
http://www.securityfocus.com/bid/93400

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ibm:security_guardium:8.2:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:9.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:9.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:9.5:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.0:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.1:*:*:*:*:*:*:*

cpe:2.3:a:ibm:security_guardium:10.01:*:*:*:*:*:*:*

EPSS

Процентиль: 45%

0.00225

Низкий

6.1 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

GHSA-fc32-pr3j-xpxj