Lucene search
JpcertCVE-2015-2967HistoryJul 10, 2015 - 3:59 p.m.
CVE-2015-2967
2015-07-1015:59:00
CWE-79
jpcert
web.nvd.nist.gov
29
cve-2015-2967
cross-site scripting
xss
vulnerability
cacti
settings.php
nvd
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.003
Percentile
65.3%
Cross-site scripting (XSS) vulnerability in settings.php in Cacti before 0.8.8d allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
cacticactiRange≤0.8.8c
Related
ubuntucve
ubuntucve
CVE-2015-2967
2015-07-10 00:00:00
jvn
jvn
JVN#78187936: Cacti vulnerable to cross-site scripting
2015-07-09 00:00:00
nvd
nvd
CVE-2015-2967
2015-07-10 15:59:00
debiancve
debiancve
CVE-2015-2967
2015-07-10 15:59:00
cvelist
cvelist
CVE-2015-2967
2015-07-10 15:00:00
prion
prion
Cross site scripting
2015-07-10 15:59:00
openvas
openvas
Debian: Security Advisory (DLA-255-1)
2023-03-08 00:00:00
Cacti Multiple Vulnerabilities (Jun 2015)
2015-07-20 00:00:00
Debian: Security Advisory (DSA-3295-1)
2015-06-23 00:00:00
nessus
nessus
Debian DSA-3295-1 : cacti - security update
2015-06-25 00:00:00
GLSA-201509-03 : Cacti: Multiple vulnerabilities
2015-09-25 00:00:00
gentoo
gentoo
Cacti: Multiple vulnerabilities
2015-09-24 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.5
Confidence
High
EPSS
0.003
Percentile
65.3%
Related for CVE-2015-2967