CVE-2006-5652

Exploit

EPSS 3.18%
Veröffentlicht 03.11.2006 00:07:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated by setting the width style for an IMG element.  NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers, it has been assigned a new CVE.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Sun ≫ Iplanet Messaging Server Messenger Express

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	3.18%	0.864

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050460.html

http://securityreason.com/securityalert/1806

http://www.securityfocus.com/archive/1/450184/100/0/threaded

http://www.securityfocus.com/bid/20838

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/29929

https://nvd.nist.gov/vuln/detail/CVE-2006-5652

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5652

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5652

EUVD