Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2003-0801
cve-2003-0801
cross-site scripting
xss
nokia electronic documentation
ned 5.0
remote attackers
arbitrary web script
cookies
url
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.0%
Cross-site scripting (XSS) vulnerability in Nokia Electronic Documentation (NED) 5.0 allows remote attackers to execute arbitrary web script and steal cookies via a URL to the docs/ directory that contains the script.
Affected configurations
Node
nokiaelectronic_documentationMatch5.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| nokia:electronic_documentation | nokia electronic documentation | eq | 5.0 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.4 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
46.0%
Related for CVE-2003-0801