Lucene search
IbmCVE-2015-0168HistoryMay 25, 2015 - 2:59 p.m.
CVE-2015-0168
2015-05-2514:59:12
CWE-79
ibm
web.nvd.nist.gov
25
ibm
security
siteprotector
system
xss
vulnerability
nvd
cve-2015-0168
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
27.4%
Cross-site scripting (XSS) vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
ibmsecurity_siteprotector_systemMatch3.0
ORibmsecurity_siteprotector_systemMatch3.0.0.1
ORibmsecurity_siteprotector_systemMatch3.0.0.2
ORibmsecurity_siteprotector_systemMatch3.0.0.3
ORibmsecurity_siteprotector_systemMatch3.0.0.4
ORibmsecurity_siteprotector_systemMatch3.0.0.5
ORibmsecurity_siteprotector_systemMatch3.0.0.6
ORibmsecurity_siteprotector_systemMatch3.1.0.0
ORibmsecurity_siteprotector_systemMatch3.1.0.1
ORibmsecurity_siteprotector_systemMatch3.1.0.2
ORibmsecurity_siteprotector_systemMatch3.1.0.3
ORibmsecurity_siteprotector_systemMatch3.1.1.0
ORibmsecurity_siteprotector_systemMatch3.1.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ibm | security_siteprotector_system | 3.0 | cpe:2.3:a:ibm:security_siteprotector_system:3.0:*:*:*:*:*:*:* |
| ibm | security_siteprotector_system | 3.0.0.1 | cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.1:*:*:*:*:*:*:* |
| ibm | security_siteprotector_system | 3.0.0.2 | cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.2:*:*:*:*:*:*:* |
| ibm | security_siteprotector_system | 3.0.0.3 | cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.3:*:*:*:*:*:*:* |
| ibm | security_siteprotector_system | 3.0.0.4 | cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.4:*:*:*:*:*:*:* |
| ibm | security_siteprotector_system | 3.0.0.5 | cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.5:*:*:*:*:*:*:* |
| ibm | security_siteprotector_system | 3.0.0.6 | cpe:2.3:a:ibm:security_siteprotector_system:3.0.0.6:*:*:*:*:*:*:* |
| ibm | security_siteprotector_system | 3.1.0.0 | cpe:2.3:a:ibm:security_siteprotector_system:3.1.0.0:*:*:*:*:*:*:* |
| ibm | security_siteprotector_system | 3.1.0.1 | cpe:2.3:a:ibm:security_siteprotector_system:3.1.0.1:*:*:*:*:*:*:* |
| ibm | security_siteprotector_system | 3.1.0.2 | cpe:2.3:a:ibm:security_siteprotector_system:3.1.0.2:*:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2015-05-25 14:59:00
cvelist
cvelist
CVE-2015-0168
2015-05-25 14:00:00
nvd
nvd
CVE-2015-0168
2015-05-25 14:59:12
CVSS2
3.5
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
AI Score
5.2
Confidence
High
EPSS
0.001
Percentile
27.4%
Related for CVE-2015-0168