exploitDog

CVE-2013-4181

Опубликовано: 10 сент. 2013

Источник: redhat

CVSS2: 4.3

EPSS Низкий

Описание

Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Red Hat Enterprise Virtualization Manager (RHEV-M), as used in Red Hat Enterprise Virtualization 3 and 3.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Ссылки на источники

https://www.cve.org/CVERecord?id=CVE-2013-4181
https://nvd.nist.gov/vuln/detail/CVE-2013-4181

Дополнительная информация

Статус:

Moderate

Дефект:

CWE-79

https://bugzilla.redhat.com/show_bug.cgi?id=988774ovirt-engine: RedirectServlet cross-site scripting flaw

EPSS

Процентиль: 70%

0.01412

Низкий

4.3 Medium

CVSS2

Связанные уязвимости

CVE-2013-4181

nvd

почти 13 лет назад

Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Red Hat Enterprise Virtualization Manager (RHEV-M), as used in Red Hat Enterprise Virtualization 3 and 3.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

GHSA-q75j-qph2-cwg9

github

около 4 лет назад

Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Red Hat Enterprise Virtualization Manager (RHEV-M), as used in Red Hat Enterprise Virtualization 3 and 3.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

EPSS

Процентиль: 70%

0.01412

Низкий

4.3 Medium

CVSS2