Multiple Apple products WebKit cross-site scripting vulnerability (CNVD-2018-21002)

🗓️ 26 Sep 2018 00:00:00Reported by China National Vulnerability DatabaseType

WebKit cross-site scripting in multiple Apple products could allow remote script execution via a crafted site.

Reporter	Title	Published	Views	Family All 51
Tenable Nessus	Apple Safari < 12 Multiple Vulnerabilities	8 Apr 201900:00	–	nessus
Tenable Nessus	Apple iOS < 12.0 Multiple Vulnerabilities (EFAIL, APPLE-SA-2018-9-24-4 and APPLE-SA-2018-10-30-8)	17 Apr 201900:00	–	nessus
Tenable Nessus	Apple iOS < 12.0 Multiple Vulnerabilities (EFAIL)	21 Sep 201800:00	–	nessus
Tenable Nessus	GLSA-201812-04 : WebkitGTK+: Multiple vulnerabilities	3 Dec 201800:00	–	nessus
Tenable Nessus	Apple iTunes < 12.9 Multiple Vulnerabilities (credentialed check)	2 Oct 201800:00	–	nessus
Tenable Nessus	Apple iTunes < 12.9 Multiple Vulnerabilities (uncredentialed check)	2 Oct 201800:00	–	nessus
Tenable Nessus	macOS : Apple Safari < 12 Multiple Vulnerabilities	20 Sep 201800:00	–	nessus
Tenable Nessus	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-68)	22 Jan 201900:00	–	nessus
Tenable Nessus	openSUSE Security Update : webkit2gtk3 (openSUSE-2019-81)	24 Jan 201900:00	–	nessus
Tenable Nessus	SUSE SLED12 / SLES12 Security Update : webkit2gtk3 (SUSE-SU-2019:0059-1)	11 Jan 201900:00	–	nessus

Source	Link
support	www.support.apple.com/en-us/HT209140

16 Oct 2018 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24.3

CVSS 36.1

EPSS0.01478