Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-29144

Опубликовано: 27 нояб. 2020
Источник: nvd
CVSS3: 5.4
CVSS2: 3.5
EPSS Низкий

Описание

In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ericsson:bscs_ix_r18_billing_\&_rating_admx:-:*:*:*:*:*:*:*
cpe:2.3:a:ericsson:bscs_ix_r18_billing_\&_rating_mx:-:*:*:*:*:*:*:*

EPSS

Процентиль: 43%
0.00206
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79

Связанные уязвимости

github
больше 3 лет назад

In Ericsson BSCS iX R18 Billing & Rating iX R18, MX is a web base module in BSCS iX that is vulnerable to stored XSS via an Alert Dashboard comment. In most test cases, session hijacking was also possible by utilizing the XSS vulnerability. This potentially allows for full account takeover, or exploiting admins' browsers by using the beef framework.

EPSS

Процентиль: 43%
0.00206
Низкий

5.4 Medium

CVSS3

3.5 Low

CVSS2

Дефекты

CWE-79