4.3
CVE-2004-1630
- EPSS 1.27%
- Veröffentlicht 25.10.2004 04:00:00
- Zuletzt bearbeitet 16.06.2026 22:08:04
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginCross-site scripting (XSS) vulnerability in the login form in Open WorkFlow Engine (OpenWFE) 1.4.x allows remote attackers to execute arbitrary web script or HTML via the url parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Openwfe ≫ Work Flow Engine Version1.4
Openwfe ≫ Work Flow Engine Version1.4.1
Openwfe ≫ Work Flow Engine Version1.4.2
Openwfe ≫ Work Flow Engine Version1.4.3
Openwfe ≫ Work Flow Engine Version1.4.4
Openwfe ≫ Work Flow Engine Version1.4.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.27% | 0.66 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:N/I:P/A:N
|
http://marc.info/?l=bugtraq&m=109876304705234&w=2
http://secunia.com/advisories/12970
http://www.securityfocus.com/bid/11514
https://exchange.xforce.ibmcloud.com/vulnerabilities/17853