Lucene search

K
cve[email protected]CVE-2008-0694
HistoryFeb 12, 2008 - 1:00 a.m.

CVE-2008-0694

2008-02-1201:00:00
CWE-79
web.nvd.nist.gov
21
ibm
os/400
v5r3m0
v5r4m0
xss
expect http header
security vulnerability
cve-2008-0694

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

57.6%

Cross-site scripting (XSS) vulnerability in the HTTP Server in IBM OS/400 V5R3M0 and V5R4M0 allows remote attackers to inject arbitrary web script or HTML via the Expect HTTP header.

Affected configurations

NVD
Node
ibmos_400Matchv5r3m0
OR
ibmos_400Matchv5r4m0

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

57.6%

Related for CVE-2008-0694