Lucene search

MitreCVE-2020-15497

HistoryJul 17, 2020 - 6:15 p.m.

CVE-2020-15497

2020-07-1718:15:12

CWE-79

mitre

web.nvd.nist.gov

cve-2020-15497

jalios jcms

xss

security vulnerability

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

47.8%

JSON

jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS

Affected configurations

Nvd

Node

jaliosjcmsMatch10.0.2build-20200224104759

VendorProductVersionCPE
jaliosjcms10.0.2cpe:2.3:a:jalios:jcms:10.0.2:build-20200224104759:*:*:*:*:*:*

Vendor	Product	Version	CPE
jalios	jcms	10.0.2	cpe:2.3:a:jalios:jcms:10.0.2:build-20200224104759::::::

References

github.com/Da2Duo

pastebin.com/KSJJu5Nx

twitter.com/joker2a1

www.jalios.com/jcms/j_6/en/home

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

47.8%

JSON

Related for CVE-2020-15497