Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

Количество 5

Количество 5

redhat логотип

CVE-2025-68385

8 месяцев назад

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
EPSS: Низкий
nvd логотип

CVE-2025-68385

8 месяцев назад

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
EPSS: Низкий
debian логотип

CVE-2025-68385

8 месяцев назад

Improper neutralization of input during web page generation ('Cross-si ...

CVSS3: 7.2
EPSS: Низкий
redos логотип

ROS-20260224-80-0033

6 месяцев назад

Уязвимость kibana

CVSS3: 6.1
EPSS: Низкий
github логотип

GHSA-x89f-99hf-gmr7

8 месяцев назад

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
redhat логотип
CVE-2025-68385

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
0%
Низкий
8 месяцев назад
nvd логотип
CVE-2025-68385

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
0%
Низкий
8 месяцев назад
debian логотип
CVE-2025-68385

Improper neutralization of input during web page generation ('Cross-si ...

CVSS3: 7.2
0%
Низкий
8 месяцев назад
redos логотип
ROS-20260224-80-0033

Уязвимость kibana

CVSS3: 6.1
0%
Низкий
6 месяцев назад
github логотип
GHSA-x89f-99hf-gmr7

Improper neutralization of input during web page generation ('Cross-site Scripting') (CWE-79) allows an authenticated user to embed a malicious script in content that will be served to web browsers causing cross-site scripting (XSS) (CAPEC-63) via a method in Vega bypassing a previous Vega XSS mitigation.

CVSS3: 7.2
0%
Низкий
8 месяцев назад

Уязвимостей на страницу