Lucene search

CertccCVE-2012-2563

HistoryJun 09, 2012 - 12:55 a.m.

CVE-2012-2563

2012-06-0900:55:01

CWE-79

certcc

web.nvd.nist.gov

cve-2012-2563

cross-site scripting

xss

bloxx web filtering

security vulnerabilities

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.002

Percentile

60.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Bloxx Web Filtering before 5.0.14 allow (1) remote attackers to inject arbitrary web script or HTML via web traffic that is examined within the Bloxx Reports component, and allow (2) remote authenticated administrators to inject arbitrary web script or HTML via vectors involving administrative menu functions.

Affected configurations

Nvd

Node

bloxxweb_filteringRange≤5.0.13

VendorProductVersionCPE
bloxxweb_filtering*cpe:2.3:a:bloxx:web_filtering:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bloxx	web_filtering	*	cpe:2.3:a:bloxx:web_filtering::::::::

References

www.kb.cert.org/vuls/id/722963

www.kb.cert.org/vuls/id/MAPG-8R9LBY

www.securityfocus.com/bid/53715

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.4

Confidence

High

EPSS

0.002

Percentile

60.7%

JSON

Related for CVE-2012-2563