Lucene search

K
cveMitreCVE-2015-2827
HistoryApr 08, 2015 - 1:59 a.m.

CVE-2015-2827

2015-04-0801:59:03
CWE-79
mitre
web.nvd.nist.gov
28
cve
2015
2827
xss
ca spectrum
vulnerability
web script
html
nvd

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

46.4%

Cross-site scripting (XSS) vulnerability in CA Spectrum 9.2.x and 9.3.x before 9.3 H02 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

Nvd
Node
broadcomspectrumMatch9.2
OR
broadcomspectrumMatch9.3
VendorProductVersionCPE
broadcomspectrum9.2cpe:2.3:a:broadcom:spectrum:9.2:*:*:*:*:*:*:*
broadcomspectrum9.3cpe:2.3:a:broadcom:spectrum:9.3:*:*:*:*:*:*:*

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

46.4%