CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
Confidence
High
EPSS
Percentile
91.4%
Opera 6.01, 6.0, and 5.12 allows remote attackers to execute arbitrary JavaScript in the security context of other sites by setting the location of a frame or iframe to a Javascript: URL.
Vendor | Product | Version | CPE |
---|---|---|---|
opera_software | opera_web_browser | 5.12 | cpe:2.3:a:opera_software:opera_web_browser:5.12:*:*:*:*:*:*:* |
opera_software | opera_web_browser | 5.12 | cpe:2.3:a:opera_software:opera_web_browser:5.12:*:win32:*:*:*:*:* |
opera_software | opera_web_browser | 6.0 | cpe:2.3:a:opera_software:opera_web_browser:6.0:*:*:*:*:*:*:* |
opera_software | opera_web_browser | 6.0 | cpe:2.3:a:opera_software:opera_web_browser:6.0:*:win32:*:*:*:*:* |
opera_software | opera_web_browser | 6.0.1 | cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:*:*:*:*:*:* |
opera_software | opera_web_browser | 6.0.1 | cpe:2.3:a:opera_software:opera_web_browser:6.0.1:*:win32:*:*:*:*:* |