4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
68.7%
Multiple cross-site scripting (XSS) vulnerabilities in the Web UI in Xymon before 4.3.1 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
osvdb.org/71489
secunia.com/advisories/44036
securityreason.com/securityalert/8209
www.securityfocus.com/archive/1/517316/100/0/threaded
www.securityfocus.com/archive/1/517325/100/0/threaded
www.securityfocus.com/bid/47156
xymon.svn.sourceforge.net/viewvc/xymon/branches/4.3.2/Changes?revision=6673&view=markup
exchange.xforce.ibmcloud.com/vulnerabilities/66542