4.3

CVE-2006-5741

EPSS 0.54%
Published 06.11.2006 18:07:00
Last modified 09.04.2025 00:30:58
Source cve@mitre.org
Teams watchlist Login
Open Login

Multiple cross-site scripting (XSS) vulnerabilities in AirMagnet Enterprise before 7.5 build 6307 allow remote attackers to inject arbitrary web script or HTML via (1) the 404 error page of the Smart Sensor Edge Sensor; (2) the user name for a failed logon, when displayed in the audit journals reviewing interface (/AirMagnetSensor/AMSensor.dll/XH) by the Smart Sensor Edge Sensor log viewer; and (3) an SSID of an AP, when displayed on an ACL page (/Amom/Amom.dll/BD) of the Enterprise Server Status Overview in the Enterprise Server Web interface.

Affected products Warnungen 0 Metrics 2 CWE 0 References 11

Data is provided by the National Vulnerability Database (NVD)

Airmagnet ≫ Enterprise Version7.5

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.54%	0.648

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://secunia.com/advisories/22475

http://www.osvdb.org/29918

http://www.osvdb.org/29919

http://www.osvdb.org/29920

http://www.securityfocus.com/archive/1/449119/100/200/threaded

http://www.securityfocus.com/archive/1/449739/100/100/threaded

http://www.securityfocus.com/archive/1/451978/100/100/threaded

http://www.securityfocus.com/bid/20602

https://nvd.nist.gov/vuln/detail/CVE-2006-5741

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-5741

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-5741

EUVD