5.8

CVE-2009-2068

Google Chrome detects http content in https web pages only when the top-level frame uses https, which allows man-in-the-middle attackers to execute arbitrary web script, in an https site's context, by modifying an http page to include an https iframe that references a script file on an http site, related to "HTTP-Intended-but-HTTPS-Loadable (HPIHSL) pages."

Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opera ≫ Opera Version5..10
Opera ≫ Opera Version5.0
Opera ≫ Opera Version5.0 Updatebeta_2
Opera ≫ Opera Version5.0 Updatebeta_3
Opera ≫ Opera Version5.0 Updatebeta_4
Opera ≫ Opera Version5.0 Updatebeta_5
Opera ≫ Opera Version5.0 Updatebeta_6
Opera ≫ Opera Version5.0 Updatebeta_7
Opera ≫ Opera Version5.0 Updatebeta_8
Opera ≫ Opera Version5.1
Opera ≫ Opera Version5.02
Opera ≫ Opera Version5.2
Opera ≫ Opera Version5.3
Opera ≫ Opera Version5.4
Opera ≫ Opera Version5.5
Opera ≫ Opera Version5.6
Opera ≫ Opera Version5.7
Opera ≫ Opera Version5.8
Opera ≫ Opera Version5.9
Opera ≫ Opera Version5.10
Opera ≫ Opera Version5.11
Opera ≫ Opera Version5.12
Opera ≫ Opera Version6 Updatebeta_1
Opera ≫ Opera Version6.0
Opera ≫ Opera Version6.0 Updatebeta_1
Opera ≫ Opera Version6.0 Updatebeta_2
Opera ≫ Opera Version6.0 Updatebeta_3
Opera ≫ Opera Version6.1
Opera ≫ Opera Version6.01
Opera ≫ Opera Version6.02
Opera ≫ Opera Version6.03
Opera ≫ Opera Version6.04
Opera ≫ Opera Version6.05
Opera ≫ Opera Version6.06
Opera ≫ Opera Version6.11
Opera ≫ Opera Version6.12
Opera ≫ Opera Version7 Updatebeta_1
Opera ≫ Opera Version7.0
Opera ≫ Opera Version7.0 Updatebeta_1
Opera ≫ Opera Version7.0 Updatebeta_1v2
Opera ≫ Opera Version7.0 Updatebeta_2
Opera ≫ Opera Version7.01
Opera ≫ Opera Version7.02
Opera ≫ Opera Version7.03
Opera ≫ Opera Version7.10
Opera ≫ Opera Version7.11
Opera ≫ Opera Version7.20
Opera ≫ Opera Version7.20 Updatebeta7
Opera ≫ Opera Version7.21
Opera ≫ Opera Version7.22
Opera ≫ Opera Version7.23
Opera ≫ Opera Version7.30
Opera ≫ Opera Version7.50
Opera ≫ Opera Version7.50 Updatebeta_1
Opera ≫ Opera Version7.51
Opera ≫ Opera Version7.52
Opera ≫ Opera Version7.54
Opera ≫ Opera Version7.54 Updateupdate_1
Opera ≫ Opera Version7.55
Opera ≫ Opera Version8.0
Opera ≫ Opera Version8.0 Updatebeta_1
Opera ≫ Opera Version8.0 Updatebeta_2
Opera ≫ Opera Version8.01
Opera ≫ Opera Version8.02
Opera ≫ Opera Version8.51
Opera ≫ Opera Version8.52
Opera ≫ Opera Version8.53
Opera ≫ Opera Version8.54
Opera ≫ Opera Version9.0 Updatebeta_1
Opera ≫ Opera Version9.01
Opera ≫ Opera Version9.02
Opera ≫ Opera Version9.10
Opera ≫ Opera Version9.20
Opera ≫ Opera Version9.21
Opera ≫ Opera Version9.23
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.394
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.8 8.6 4.9
AV:N/AC:M/Au:N/C:P/I:P/A:N
CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.