Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2007-5496
HistoryMay 23, 2008 - 3:32 p.m.

CVE-2007-5496

2008-05-2315:32:00
CWE-79
[email protected]
web.nvd.nist.gov
23
cve-2007-5496
cross-site scripting
xss vulnerability
setroubleshoot
local users
web script
html
access vector cache
avc
log entry
log file
sealert

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON

Cross-site scripting (XSS) vulnerability in setroubleshoot 2.0.5 allows local users to inject arbitrary web script or HTML via a crafted (1) file or (2) process name, which triggers an Access Vector Cache (AVC) log entry in a log file used during composition of HTML documents for sealert.

Affected configurations

NVD
Node
redhatenterprise_linuxMatch5.0server
OR
redhatenterprise_linux_desktopMatch5client
AND
selinuxsetroubleshootMatch2.0.5

Related

prion 1
nvd 1
veracode 1
cvelist 1
openvas 3
nessus 3
oraclelinux 1
redhat 1
prion
prion
Cross site scripting
2008-05-23 15:32:00
nvd
nvd
CVE-2007-5496
2008-05-23 15:32:00
veracode
veracode
Cross-site Scripting (XSS)
2020-04-10 00:23:34
cvelist
cvelist
CVE-2007-5496
2008-05-23 14:00:00
openvas
openvas
RedHat Update for setroubleshoot RHSA-2008:0061-02
2009-03-06 00:00:00
RedHat Update for setroubleshoot RHSA-2008:0061-02
2009-03-06 00:00:00
Oracle: Security Advisory (ELSA-2008-0061)
2015-10-08 00:00:00
nessus
nessus
Scientific Linux Security Update : setroubleshoot on SL5.x i386/x86_64
2012-08-01 00:00:00
RHEL 5 : setroubleshoot (RHSA-2008:0061)
2008-05-22 00:00:00
Oracle Linux 5 : setroubleshoot (ELSA-2008-0061)
2023-09-07 00:00:00
oraclelinux
oraclelinux
setroubleshoot security and bug fix update
2008-05-30 00:00:00
redhat
redhat
(RHSA-2008:0061) Moderate: setroubleshoot security and bug fix update
2008-05-20 00:00:00

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

5.1 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

31.9%

JSON
Related for CVE-2007-5496
prion1nvd1veracode1cvelist1openvas3nessus3oraclelinux1redhat1