CVE-2004-2757

EPSS 0.27%
Veröffentlicht 31.12.2004 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Cross-site scripting (XSS) vulnerability in the failed login page in Novell iChain before 2.2 build 2.2.113 and 2.3 First Customer Ship (FCS) allows remote attackers to inject arbitrary web script or HTML via url parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Novell ≫ Ichain Version <= 2.2

Novell ≫ Ichain Updatesp1 Version <= 2.2

Novell ≫ Ichain Updatesp1a Version <= 2.2

Novell ≫ Ichain Updatesp2 Version <= 2.2

Novell ≫ Ichain Updatesp3 Version <= 2.2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.27%	0.476

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

http://support.novell.com/cgi-bin/search/searchtid.cgi?/10080762.htm

http://secunia.com/advisories/10653

Vendor Advisory

http://www.securityfocus.com/bid/9412

https://exchange.xforce.ibmcloud.com/vulnerabilities/14873

https://nvd.nist.gov/vuln/detail/CVE-2004-2757

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-2757

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-2757

EUVD