Lucene search

MitreCVE-2003-1587

HistoryFeb 05, 2010 - 10:30 p.m.

CVE-2003-1587

2010-02-0522:30:02

CWE-79

mitre

web.nvd.nist.gov

cve

2003

1587

xss

vulnerability

loganpro

remote attackers

web script

html

user-agent

http header

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

52.7%

JSON

Cross-site scripting (XSS) vulnerability in LoganPro allows remote attackers to inject arbitrary web script or HTML via a crafted User-Agent HTTP header.

Affected configurations

Nvd

Node

iplanetloganpro

VendorProductVersionCPE
iplanetloganpro*cpe:2.3:a:iplanet:loganpro:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
iplanet	loganpro	*	cpe:2.3:a:iplanet:loganpro::::::::

References

www.securityfocus.com/archive/1/313867

exchange.xforce.ibmcloud.com/vulnerabilities/56645

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.002

Percentile

52.7%

JSON

Related for CVE-2003-1587