CVE-2006-5122

EPSS 0.28%
Published 03.10.2006 04:03:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) "any field create name field" except "create new group name" or (2) any description field.

Affected products Warnungen 0 Metrics 2 CWE 0 References 9

Data is provided by the National Vulnerability Database (NVD)

Hp ≫ Mercury Sitescope Version8.2_8.1.2.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.28%	0.508

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.9	6.8	4.9	AV:N/AC:M/Au:S/C:P/I:P/A:N

http://secunia.com/advisories/22215

http://securityreason.com/securityalert/1670

http://www.securityfocus.com/archive/1/447397/100/0/threaded

http://www.securityfocus.com/bid/20275

http://www.vupen.com/english/advisories/2006/3888

https://exchange.xforce.ibmcloud.com/vulnerabilities/29295

https://nvd.nist.gov/vuln/detail/CVE-2006-5122

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5122

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5122

EUVD