CVE-2006-5652

Exploit

EPSS 3.18%
Published 03.11.2006 00:07:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated by setting the width style for an IMG element.  NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers, it has been assigned a new CVE.

Affected products Warnungen 0 Metrics 2 CWE 0 References 8

Data is provided by the National Vulnerability Database (NVD)

Sun ≫ Iplanet Messaging Server Messenger Express

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	3.18%	0.864

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://lists.grok.org.uk/pipermail/full-disclosure/2006-October/050460.html

http://securityreason.com/securityalert/1806

http://www.securityfocus.com/archive/1/450184/100/0/threaded

http://www.securityfocus.com/bid/20838

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/29929

https://nvd.nist.gov/vuln/detail/CVE-2006-5652

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5652

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5652

EUVD