Lucene search

K
cvelistMicrofocusCVELIST:CVE-2016-1609
HistoryAug 01, 2016 - 1:00 a.m.

CVE-2016-1609

2016-08-0101:00:00
microfocus
www.cve.org

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.4%

Multiple cross-site scripting (XSS) vulnerabilities in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allow remote authenticated users to inject arbitrary web script or HTML via crafted input, as demonstrated by a crafted attribute of an IMG element in the phone field of a user profile.

6.4 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

64.4%