Lucene search

MitreCVE-2007-5211

HistoryOct 04, 2007 - 11:17 p.m.

CVE-2007-5211

2007-10-0423:17:00

CWE-79

mitre

web.nvd.nist.gov

cve-2007-5211

cross-site scripting

xss

arbor networks peakflow sp

security vulnerability

remote attack

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

61.4%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Arbor Networks Peakflow SP 3.5.1 before patch 14, and 3.6.1 before patch 5, when scope accounts are enabled, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors involving GET or POST requests. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected configurations

Nvd

Node

arbor_networkspeakflow_spMatch3.5.1

arbor_networkspeakflow_spMatch3.6.1

VendorProductVersionCPE
arbor_networkspeakflow_sp3.5.1cpe:2.3:a:arbor_networks:peakflow_sp:3.5.1:*:*:*:*:*:*:*
arbor_networkspeakflow_sp3.6.1cpe:2.3:a:arbor_networks:peakflow_sp:3.6.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
arbor_networks	peakflow_sp	3.5.1	cpe:2.3:a:arbor_networks:peakflow_sp:3.5.1:::::::*
arbor_networks	peakflow_sp	3.6.1	cpe:2.3:a:arbor_networks:peakflow_sp:3.6.1:::::::*

References

secunia.com/advisories/27003

www.securityfocus.com/bid/25910

exchange.xforce.ibmcloud.com/vulnerabilities/36926

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.7

Confidence

High

EPSS

0.002

Percentile

61.4%

JSON

Related for CVE-2007-5211