CVE-2008-2462

2008-06-3022:41:00

CWE-79

web.nvd.nist.gov

cve-2008-2462

cross-site scripting

xss

caucho resin

web script injection

html injection

6.7 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.4%

CPENameOperatorVersion
caucho:resincaucho resinlt3.0.25
caucho:resincaucho resinlt3.1.4

CPE	Name	Operator	Version
caucho:resin	caucho resin	lt	3.0.25
caucho:resin	caucho resin	lt	3.1.4

References

secunia.com/advisories/30845

www.caucho.com/resin/changes/changes-31.xtp#3.1.4%20-%20Dec%205%2C%202007

www.kb.cert.org/vuls/id/305208

www.securityfocus.com/bid/29948

www.securitytracker.com/id?1020372

www.vupen.com/english/advisories/2008/1930/references

exchange.xforce.ibmcloud.com/vulnerabilities/43367