CVE-2008-0925

2008-06-1819:29:00

mitre

www.cve.org

5.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.8%

JSON

Cross-site scripting (XSS) vulnerability in the iMonitor interface in Novell eDirectory 8.7.3.x before 8.7.3 sp10, and 8.8.x before 8.8.2 ftf2, allows remote attackers to inject arbitrary web script or HTML via unspecified parameters that are used within “error messages of the HTTP stack.”

References

secunia.com/advisories/30748

securitytracker.com/id?1020321

support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037180.html

support.novell.com/docs/Readmes/InfoDocument/patchbuilder/readme_5037181.html

www.novell.com/support/viewContent.do?externalId=3460217&sliceId=1

www.securityfocus.com/bid/29782

www.vupen.com/english/advisories/2008/1863/references

exchange.xforce.ibmcloud.com/vulnerabilities/43151