CVE-2017-12175

Опубликовано: 26 июл. 2018

Источник: nvd

CVSS3: 3.5

CVSS3: 5.4

CVSS2: 3.5

EPSS Низкий

Описание

Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocomplete functionality.

Ссылки

http://www.securityfocus.com/bid/101245
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:2927
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12175
Exploit
Issue Tracking
Third Party Advisory
https://projects.theforeman.org/issues/22042
Exploit
Third Party Advisory
http://www.securityfocus.com/bid/101245
Third Party Advisory
VDB Entry
https://access.redhat.com/errata/RHSA-2018:2927
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2017-12175
Exploit
Issue Tracking
Third Party Advisory
https://projects.theforeman.org/issues/22042
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:redhat:satellite:*:*:*:*:*:*:*:*

Версия до 6.5 (исключая)

EPSS

Процентиль: 63%

0.01099

Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

CVE-2017-12175

CVSS3: 3.5

redhat

почти 9 лет назад

Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocomplete functionality.

GHSA-x7x7-89ww-4r22

CVSS3: 5.4

github

больше 4 лет назад

Red Hat Satellite before 6.5 is vulnerable to a XSS in discovery rule when you are entering filter and you use autocomplete functionality.

EPSS

Процентиль: 63%

0.01099

Низкий

3.5 Low

CVSS3

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79