Lucene search
HistoryJul 25, 2006 - 11:04 p.m.
CVE-2006-3842
cve-2006-3842
cross-site scripting
xss
zoho virtual office
remote attackers
web script
html
vulnerability
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.3 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.6%
Cross-site scripting (XSS) vulnerability in Zoho Virtual Office 3.2 Build 3210 allows remote attackers to execute arbitrary web script or HTML via an HTML message.
Affected configurations
Node
adventnetzoho_virtual_officeMatch3.2_build_3210
| CPE | Name | Operator | Version |
|---|---|---|---|
| adventnet:zoho_virtual_office | adventnet zoho virtual office | eq | 3.2_build_3210 |
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
6.3 Medium
AI Score
Confidence
High
0.011 Low
EPSS
Percentile
84.6%
Related for CVE-2006-3842