Lucene search
HistoryJul 11, 2005 - 4:00 a.m.
CVE-2005-2186
cve-2005-2186
cross-site scripting
xss
vulnerabilities
mcafee
intrushield
security management system
systemevent.jsp
nvd
5.8 Medium
AI Score
Confidence
High
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
49.6%
Multiple cross-site scripting (XSS) vulnerabilities in McAfee IntruShield Security Management System allow remote authenticated users to inject arbitrary web script or HTML via the (1) thirdMenuName or (2) resourceName parameter to SystemEvent.jsp.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mcafee:intrushield_security_management_system | mcafee intrushield security management system | eq | * |
5.8 Medium
AI Score
Confidence
High
1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
49.6%