Lucene search
MitreCVE-2021-35377HistoryMar 06, 2023 - 8:15 p.m.
CVE-2021-35377
2023-03-0620:15:09
CWE-79
mitre
web.nvd.nist.gov
43
cve-2021-35377
cross site scripting
vicidial
security vulnerability
nvd
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
34.6%
Cross Site Scripting vulnerability found in VICIdial v2.14-610c and v.2.10-415c allows attackers execute arbitrary code via the /agc/vicidial.php, agc/vicidial-greay.php, and /vicidial/KHOMP_admin.php parameters.
Affected configurations
Node
vicidialvicidialMatch2.9-401c140612-1626
ORvicidialvicidialMatch2.10-415c140918-1606
ORvicidialvicidialMatch2.14-597c191114-0949
ORvicidialvicidialMatch2.14-610c200528-2239
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vicidial | vicidial | 2.9-401c | cpe:2.3:a:vicidial:vicidial:2.9-401c:140612-1626:*:*:*:*:*:* |
| vicidial | vicidial | 2.10-415c | cpe:2.3:a:vicidial:vicidial:2.10-415c:140918-1606:*:*:*:*:*:* |
| vicidial | vicidial | 2.14-597c | cpe:2.3:a:vicidial:vicidial:2.14-597c:191114-0949:*:*:*:*:*:* |
| vicidial | vicidial | 2.14-610c | cpe:2.3:a:vicidial:vicidial:2.14-610c:200528-2239:*:*:*:*:*:* |
Related
prion
prion
Cross site scripting
2023-03-06 20:15:00
nvd
nvd
CVE-2021-35377
2023-03-06 20:15:09
cvelist
cvelist
CVE-2021-35377
2023-03-06 00:00:00
CVSS3
6.1
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
AI Score
6.4
Confidence
High
EPSS
0.001
Percentile
34.6%
Related for CVE-2021-35377