Lucene search

K
osvGoogleOSV:CVE-2017-14239
HistorySep 11, 2017 - 9:29 a.m.

CVE-2017-14239

2017-09-1109:29:00
Google
osv.dev
2

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

28.6%

Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM 6.0.0 allow remote authenticated users to inject arbitrary web script or HTML via the (1) CompanyName, (2) CompanyAddress, (3) CompanyZip, (4) CompanyTown, (5) Fax, (6) EMail, (7) Web, (8) ManagingDirectors, (9) Note, (10) Capital, (11) ProfId1, (12) ProfId2, (13) ProfId3, (14) ProfId4, (15) ProfId5, or (16) ProfId6 parameter to htdocs/admin/company.php.

AI Score

5.5

Confidence

High

EPSS

0.001

Percentile

28.6%