Lucene search

K
nvd[email protected]NVD:CVE-2008-6570
HistoryMar 31, 2009 - 5:30 p.m.

CVE-2008-6570

2009-03-3117:30:00
CWE-79
web.nvd.nist.gov
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.003

Percentile

69.3%

Cross-site scripting (XSS) vulnerability in the RSS reader in Cybozu Garoon 2.0.0 through 2.1.3 allows remote attackers to inject arbitrary web script or HTML via a crafted RSS feed.

Affected configurations

Nvd
Node
cybozugaroonMatch2.0.0
OR
cybozugaroonMatch2.0.1
OR
cybozugaroonMatch2.0.2
OR
cybozugaroonMatch2.0.3
OR
cybozugaroonMatch2.0.4
OR
cybozugaroonMatch2.0.5
OR
cybozugaroonMatch2.0.6
OR
cybozugaroonMatch2.1.0
OR
cybozugaroonMatch2.1.1
OR
cybozugaroonMatch2.1.2
OR
cybozugaroonMatch2.1.3
VendorProductVersionCPE
cybozugaroon2.0.0cpe:2.3:a:cybozu:garoon:2.0.0:*:*:*:*:*:*:*
cybozugaroon2.0.1cpe:2.3:a:cybozu:garoon:2.0.1:*:*:*:*:*:*:*
cybozugaroon2.0.2cpe:2.3:a:cybozu:garoon:2.0.2:*:*:*:*:*:*:*
cybozugaroon2.0.3cpe:2.3:a:cybozu:garoon:2.0.3:*:*:*:*:*:*:*
cybozugaroon2.0.4cpe:2.3:a:cybozu:garoon:2.0.4:*:*:*:*:*:*:*
cybozugaroon2.0.5cpe:2.3:a:cybozu:garoon:2.0.5:*:*:*:*:*:*:*
cybozugaroon2.0.6cpe:2.3:a:cybozu:garoon:2.0.6:*:*:*:*:*:*:*
cybozugaroon2.1.0cpe:2.3:a:cybozu:garoon:2.1.0:*:*:*:*:*:*:*
cybozugaroon2.1.1cpe:2.3:a:cybozu:garoon:2.1.1:*:*:*:*:*:*:*
cybozugaroon2.1.2cpe:2.3:a:cybozu:garoon:2.1.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 111

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.003

Percentile

69.3%

Related for NVD:CVE-2008-6570