4.3

CVE-2005-1756

Cross-site scripting (XSS) vulnerability in the ModWeb agent for Novell NetMail 3.52 before 3.52C allows remote attackers to inject arbitrary web script or HTML via calendar display fields.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Novell ≫ Netmail Version3.0.3a Updatea
Novell ≫ Netmail Version3.0.3a Updateb
Novell ≫ Netmail Version3.1
Novell ≫ Netmail Version3.1 Updatef
Novell ≫ Netmail Version3.5.2 Updatea
Novell ≫ Netmail Version3.5.2 Updateb
Novell ≫ Netmail Version3.5.2 Updatee-ftfl
Novell ≫ Netmail Version3.10
Novell ≫ Netmail Version3.10 Updatea
Novell ≫ Netmail Version3.10 Updateb
Novell ≫ Netmail Version3.10 Updatec
Novell ≫ Netmail Version3.10 Updated
Novell ≫ Netmail Version3.10 Updatee
Novell ≫ Netmail Version3.10 Updatef
Novell ≫ Netmail Version3.10 Updateg
Novell ≫ Netmail Version3.10 Updateh
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.32% 0.812
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/15644
Patch
Vendor Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/10097957.htm
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971588.htm
Patch
Vendor Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971590.htm
Patch
Vendor Advisory
http://support.novell.com/cgi-bin/search/searchtid.cgi?/2971591.htm
Patch
Vendor Advisory
http://www.osvdb.org/17240
http://www.securityfocus.com/bid/13926
http://www.vupen.com/english/advisories/2005/0727