Lucene search

K
cveMitreCVE-2015-6530
HistoryAug 20, 2015 - 8:59 p.m.

CVE-2015-6530

2015-08-2020:59:04
CWE-79
mitre
web.nvd.nist.gov
24
cve
2015
6530
cross-site scripting
xss
opentext
secure mft
nvd
vulnerability
web script
html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

66.0%

Cross-site scripting (XSS) vulnerability in OpenText Secure MFT 2013 before 2013 R3 P6 and 2014 before 2014 R2 P2 allows remote attackers to inject arbitrary web script or HTML via the querytext parameter to userdashboard.jsp.

Affected configurations

Nvd
Node
opentextsecure_mft_2013Ranger3p5
OR
opentextsecure_mft_2014Ranger2p1
VendorProductVersionCPE
opentextsecure_mft_2013*cpe:2.3:a:opentext:secure_mft_2013:*:p5:*:*:*:*:*:*
opentextsecure_mft_2014*cpe:2.3:a:opentext:secure_mft_2014:*:p1:*:*:*:*:*:*

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

66.0%

Related for CVE-2015-6530