6.8

CVE-2006-6640

EPSS 1.97%
Veröffentlicht 19.12.2006 20:28:00
Zuletzt bearbeitet 16.06.2026 22:33:31
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Multiple cross-site scripting (XSS) vulnerabilities in Omniture SiteCatalyst allow remote attackers to inject arbitrary web script or HTML via the (1) ss parameter in (a) search.asp and the (2) company and (3) username fields on (b) the web login page.  NOTE: some details were obtained from third party information.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 10

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Omniture ≫ Sitecatalyst Version0

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.97%	0.778

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://securityreason.com/securityalert/2048

http://securitytracker.com/id?1017392

http://www.hackerscenter.com/archive/view.asp?id=26714

http://www.securityfocus.com/archive/1/454597/100/0/threaded

http://www.securityfocus.com/archive/1/458130/100/100/threaded

http://www.securityfocus.com/bid/21620

https://exchange.xforce.ibmcloud.com/vulnerabilities/30916

https://nvd.nist.gov/vuln/detail/CVE-2006-6640

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2006-6640

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2006-6640

EUVD