Lucene search

[email protected]CVE-2008-5093

HistoryNov 14, 2008 - 7:20 p.m.

CVE-2008-5093

2008-11-1419:20:54

CWE-79

[email protected]

web.nvd.nist.gov

xss

vulnerability

novell

edirectory

httpstk

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.0%

JSON

Cross-site scripting (XSS) vulnerability in the HTTP Protocol Stack (HTTPSTK) in Novell eDirectory before 8.8 SP3 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

Affected configurations

NVD

Node

novelledirectory

novelledirectoryRange≤8.8sp2windows

novelledirectoryMatch8.0

novelledirectoryMatch8.5.12a

novelledirectoryMatch8.5.27

novelledirectoryMatch8.6.2

novelledirectoryMatch8.7

novelledirectoryMatch8.7.1

novelledirectoryMatch8.7.1sp1

novelledirectoryMatch8.7.3

novelledirectoryMatch8.7.3sp1windows

novelledirectoryMatch8.7.3sp2windows

novelledirectoryMatch8.7.3sp3windows

novelledirectoryMatch8.7.3sp4windows

novelledirectoryMatch8.7.3sp5windows

novelledirectoryMatch8.7.3sp6windows

novelledirectoryMatch8.7.3sp7windows

novelledirectoryMatch8.7.3sp8windows

novelledirectoryMatch8.7.3sp9windows

novelledirectoryMatch8.7.3.8

novelledirectoryMatch8.7.3.8_presp9

novelledirectoryMatch8.7.3.9

novelledirectoryMatch8.7.3.9linux

novelledirectoryMatch8.7.3.9solaris

novelledirectoryMatch8.7.3.9windows_2000

novelledirectoryMatch8.7.3.9windows_2003

novelledirectoryMatch8.7.3.10

novelledirectoryMatch8.8

novelledirectoryMatch8.8linux

novelledirectoryMatch8.8solaris

novelledirectoryMatch8.8windows_2000

novelledirectoryMatch8.8windows_2003

novelledirectoryMatch8.8.1

novelledirectoryMatch8.8.1linux

novelledirectoryMatch8.8.1solaris

novelledirectoryMatch8.8.1windows_2000

novelledirectoryMatch8.8.1windows_2003

novelledirectoryMatch8.8.2

novelledirectoryMatch8.8.2linux

novelledirectoryMatch8.8.2solaris

novelledirectoryMatch8.8.2windows_2000

novelledirectoryMatch8.8.2windows_2003

CPENameOperatorVersion
novell:edirectorynovell edirectoryeq*
novell:edirectorynovell edirectoryle8.8
novell:edirectorynovell edirectoryeq8.0
novell:edirectorynovell edirectoryeq8.5.12a
novell:edirectorynovell edirectoryeq8.5.27
novell:edirectorynovell edirectoryeq8.6.2
novell:edirectorynovell edirectoryeq8.7
novell:edirectorynovell edirectoryeq8.7.1
novell:edirectorynovell edirectoryeq8.7.3
novell:edirectorynovell edirectoryeq8.7.3.8

CPE	Name	Operator	Version
novell:edirectory	novell edirectory	eq	*
novell:edirectory	novell edirectory	le	8.8
novell:edirectory	novell edirectory	eq	8.0
novell:edirectory	novell edirectory	eq	8.5.12a
novell:edirectory	novell edirectory	eq	8.5.27
novell:edirectory	novell edirectory	eq	8.6.2
novell:edirectory	novell edirectory	eq	8.7
novell:edirectory	novell edirectory	eq	8.7.1
novell:edirectory	novell edirectory	eq	8.7.3
novell:edirectory	novell edirectory	eq	8.7.3.8