Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2007-6388
HistoryJan 08, 2008 - 6:46 p.m.

CVE-2007-6388

2008-01-0818:46:00
CWE-79
[email protected]
web.nvd.nist.gov
1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.843 High

EPSS

Percentile

98.5%

JSON

Cross-site scripting (XSS) vulnerability in mod_status in the Apache HTTP Server 2.2.0 through 2.2.6, 2.0.35 through 2.0.61, and 1.3.2 through 1.3.39, when the server-status page is enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD
Node
apachehttp_serverRange1.3.2–1.3.39
OR
apachehttp_serverRange2.0.35–2.0.61
OR
apachehttp_serverRange2.2.0–2.2.6

References

Related

openvas 71
httpd 3
ubuntucve 1
cve 1
prion 1
seebug 1
debiancve 1
securityvulns 6
veracode 1
cvelist 1
slackware 3
nessus 39
redhat 8
oraclelinux 3
centos 4
fedora 2
altlinux 3
suse 1
vmware 2
ubuntu 1
oracle 1
openvas
openvas
HP-UX Update for Apache HPSBUX02313
2009-05-05 00:00:00
HP-UX Update for Apache HPSBUX02313
2009-05-05 00:00:00
Slackware Advisory SSA:2008-210-02 httpd
2012-09-11 00:00:00
httpd
httpd
Apache Httpd < 2.0.63 : mod_status XSS
2007-12-15 00:00:00
Apache Httpd < 2.2.8 : mod_status XSS
2007-12-15 00:00:00
Apache Httpd < 1.3.41 : mod_status XSS
2007-12-15 00:00:00
ubuntucve
ubuntucve
CVE-2007-6388
2008-01-08 00:00:00
cve
cve
CVE-2007-6388
2008-01-08 18:46:00
prion
prion
Cross site scripting
2008-01-08 18:46:00
seebug
seebug
Apache HTTP Server 2.2.6, 2.0.61和1.3.39 'mod_status'跨站脚本漏洞
2008-01-14 00:00:00
debiancve
debiancve
CVE-2007-6388
2008-01-08 18:46:00
securityvulns
securityvulns
SecurityReason - Apache &#40;mod_status&#41; Refresh Header - Open Redirector &#40;XSS&#41;
2008-01-16 00:00:00
HP OpenView Network Node Manager crossite scripting
2008-11-21 00:00:00
[security bulletin] HPSBMA02388 SSRT080059 rev.1 - HP OpenView Network Node Manager &#40;OV NNM&#41;, Remote Cross Site Scripting &#40;XSS&#41;
2008-11-21 00:00:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:19:35
cvelist
cvelist
CVE-2007-6388
2008-01-08 18:00:00
slackware
slackware
[slackware-security] httpd
2008-07-29 05:31:49
[slackware-security] apache
2008-02-15 01:23:13
[slackware-security] httpd
2008-02-15 01:22:54
nessus
nessus
Slackware 12.0 / 12.1 / current : httpd (SSA:2008-210-02)
2008-07-29 00:00:00
Slackware 10.0 / 10.1 / 10.2 / 11.0 / 8.1 / 9.0 / 9.1 : apache (SSA:2008-045-02)
2008-02-18 00:00:00
SuSE9 Security Update : Apache (YOU Patch Number 12125)
2009-09-24 00:00:00
redhat
redhat
(RHSA-2008:0007) Moderate: httpd security update
2008-01-15 00:00:00
(RHSA-2008:0004) Moderate: apache security update
2008-01-15 00:00:00
(RHSA-2008:0006) Moderate: httpd security update
2008-01-15 00:00:00
oraclelinux
oraclelinux
Moderate: httpd security update
2008-01-15 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
Moderate: httpd security update
2008-01-15 00:00:00
centos
centos
apache security update
2008-01-16 02:42:35
httpd, mod_ssl security update
2008-01-15 13:48:01
httpd, mod_ssl security update
2008-01-15 12:48:29
fedora
fedora
[SECURITY] Fedora 8 Update: httpd-2.2.8-1.fc8
2008-02-16 02:11:16
[SECURITY] Fedora 7 Update: httpd-2.2.8-1.fc7
2008-02-16 02:08:32
altlinux
altlinux
Security fix for the ALT Linux 9 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 8 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
Security fix for the ALT Linux 10 package apache2 version 2.2.8-alt1
2008-02-29 00:00:00
suse
suse
cross site scripting in apache2,apache
2008-04-04 16:29:16
vmware
vmware
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
VMware Hosted products update libpng and Apache HTTP Server
2009-08-20 00:00:00
ubuntu
ubuntu
Apache vulnerabilities
2008-02-04 00:00:00
oracle
oracle
Oracle Critical Patch Update - July 2013
2013-07-16 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.7 Medium

AI Score

Confidence

High

0.843 High

EPSS

Percentile

98.5%

JSON
Related for NVD:CVE-2007-6388
openvas71httpd3ubuntucve1cve1prion1seebug1debiancve1securityvulns6veracode1cvelist1slackware3nessus39redhat8oraclelinux3centos4fedora2altlinux3suse1vmware2ubuntu1oracle1