6.1

CVE-2018-4374

A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Apple ≫ Safari Version < 12.0.1
Apple ≫ iPhone OS Version < 12.1
Apple ≫ watchOS Version < 5.1
Apple ≫ iCloud Version < 7.8
   Microsoft ≫ Windows Version -
Apple ≫ iTunes Version < 12.9.1
   Microsoft ≫ Windows Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.18% 0.805
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.1 2.8 2.7
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
NIST 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:N/I:P/A:N
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

https://support.apple.com/kb/HT209192
Vendor Advisory
https://support.apple.com/kb/HT209195
Vendor Advisory
https://support.apple.com/kb/HT209196
Vendor Advisory
https://support.apple.com/kb/HT209197
Vendor Advisory
https://support.apple.com/kb/HT209198
Vendor Advisory