[ASA-201707-30] cacti: cross-site scripting

🗓️ 27 Jul 2017 00:00:00Reported by ArchLinuxType

archlinux🔗 security.archlinux.org👁 21 Views

Cacti cross-site scripting 1.1.14-1 upgrade availabl

Reporter	Title	Published	Views	Family All 15
FreeBSD	Cacti -- Cross-site scripting (XSS) vulnerability in auth_profile.php	20 Jul 201700:00	–	freebsd
Cvelist	CVE-2017-11691	27 Jul 201706:00	–	cvelist
OSV	CVE-2017-11691	27 Jul 201706:29	–	osv
OSV	cacti-1.2.18-1.2 on GA media	15 Jun 202400:00	–	osv
NVD	CVE-2017-11691	27 Jul 201706:29	–	nvd
Tenable Nessus	FreeBSD : Cacti -- XSS (XSS) vulnerability in auth_profile.php (f86d0e5d-7467-11e7-93af-005056925db4)	31 Jul 201700:00	–	nessus
Tenable Nessus	openSUSE Security Update : cacti / cacti-spine (openSUSE-2017-889)	8 Aug 201700:00	–	nessus
CVE	CVE-2017-11691	27 Jul 201706:29	–	cve
OpenVAS	Cacti XSS Vulnerability - Linux	28 Jul 201700:00	–	openvas
OpenVAS	Cacti XSS Vulnerability - Windows	28 Jul 201700:00	–	openvas

Source	Link
security	www.security.archlinux.org/AVG-365
seclists	www.seclists.org/oss-sec/2017/q3/217
github	www.github.com/Cacti/cacti/issues/867
github	www.github.com/Cacti/cacti/commit/104090aeead4aa433bf1f18cd6d52dcfeb71236c
security	www.security.archlinux.org/CVE-2017-11691

OS	OS Version	Architecture	Package	Package Version	Filename
ArchLinux	any	any	cacti	1.1.14-1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Jul 2017 00:00Current

2.4Low risk

Vulners AI Score2.4

EPSS0.001