Lucene search

[email protected]CVE-2006-2351

HistoryMay 15, 2006 - 10:02 a.m.

CVE-2006-2351

2006-05-1510:02:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2006-2351

cross-site scripting

xss

ipswitch whatsup

web security

vulnerability

nvd

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.8%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in IPswitch WhatsUp Professional 2006 and WhatsUp Professional 2006 Premium allow remote attackers to inject arbitrary web script or HTML via the (1) sDeviceView or (2) nDeviceID parameter to (a) NmConsole/Navigation.asp or (3) sHostname parameter to (b) NmConsole/ToolResults.asp.

CPENameOperatorVersion
ipswitch:whatsup_professionalipswitch whatsup professionaleq2006_premium
ipswitch:whatsup_professionalipswitch whatsup professionaleq2006

CPE	Name	Operator	Version
ipswitch:whatsup_professional	ipswitch whatsup professional	eq	2006_premium
ipswitch:whatsup_professional	ipswitch whatsup professional	eq	2006

References

secunia.com/advisories/20075

securityreason.com/securityalert/897

www.osvdb.org/25469

www.osvdb.org/25470

www.securityfocus.com/archive/1/433808

www.securityfocus.com/bid/17964

www.vupen.com/english/advisories/2006/1787

exchange.xforce.ibmcloud.com/vulnerabilities/26500

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

54.8%

JSON

Related for CVE-2006-2351

prion1 nessus1 openvas2