CVE-2007-0791

EPSS 0.79%
Veröffentlicht 06.02.2007 19:28:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Cross-site scripting (XSS) vulnerability in Atom feeds in Bugzilla 2.20.3, 2.22.1, and 2.23.3, and earlier versions down to 2.20.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Mozilla ≫ Bugzilla Version2.20.1

Mozilla ≫ Bugzilla Version2.20.2

Mozilla ≫ Bugzilla Version2.20.3

Mozilla ≫ Bugzilla Version2.21

Mozilla ≫ Bugzilla Version2.21.1

Mozilla ≫ Bugzilla Version2.21.2

Mozilla ≫ Bugzilla Version2.22

Mozilla ≫ Bugzilla Version2.22 Updaterc1

Mozilla ≫ Bugzilla Version2.22.1

Mozilla ≫ Bugzilla Version2.23.2

Mozilla ≫ Bugzilla Version2.23.3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.79%	0.731

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:P/A:N

http://osvdb.org/33090

http://secunia.com/advisories/24031

http://securityreason.com/securityalert/2222

http://securitytracker.com/id?1017585

http://www.bugzilla.org/security/2.20.3/

Vendor Advisory

http://www.securityfocus.com/archive/1/459025/100/0/threaded

http://www.securityfocus.com/bid/22380

http://www.vupen.com/english/advisories/2007/0477

https://exchange.xforce.ibmcloud.com/vulnerabilities/32248

https://nvd.nist.gov/vuln/detail/CVE-2007-0791

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-0791

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-0791

EUVD