Lucene search

[email protected]CVE-2013-2136

HistoryAug 19, 2013 - 11:55 p.m.

CVE-2013-2136

2013-08-1923:55:00

CWE-79

[email protected]

web.nvd.nist.gov

apache cloudstack

xss

cve-2013-2136

security vulnerability

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizard; (2) New network name, (3) instance name, or (4) group to the Instance wizard; (5) unspecified “multi-edit fields;” and (6) unspecified “list view” edit fields related to global settings.

CPENameOperatorVersion
apache:cloudstackapache cloudstackeq2.2.7
apache:cloudstackapache cloudstackeq2.1.6
apache:cloudstackapache cloudstackeq2.2.14
apache:cloudstackapache cloudstackeq2.2.0
apache:cloudstackapache cloudstackeq2.2.12
apache:cloudstackapache cloudstackeq2.2.6
apache:cloudstackapache cloudstackeq2.2.9
apache:cloudstackapache cloudstackeq2.1.8
apache:cloudstackapache cloudstackeq2.1.2
apache:cloudstackapache cloudstackeq2.0

CPE	Name	Operator	Version
apache:cloudstack	apache cloudstack	eq	2.2.7
apache:cloudstack	apache cloudstack	eq	2.1.6
apache:cloudstack	apache cloudstack	eq	2.2.14
apache:cloudstack	apache cloudstack	eq	2.2.0
apache:cloudstack	apache cloudstack	eq	2.2.12
apache:cloudstack	apache cloudstack	eq	2.2.6
apache:cloudstack	apache cloudstack	eq	2.2.9
apache:cloudstack	apache cloudstack	eq	2.1.8
apache:cloudstack	apache cloudstack	eq	2.1.2
apache:cloudstack	apache cloudstack	eq	2.0

Rows per page:

1-10 of 331

References

archives.neohapsis.com/archives/bugtraq/2013-08/0034.html

archives.neohapsis.com/archives/bugtraq/2013-08/0047.html

osvdb.org/96074

osvdb.org/96075

osvdb.org/96076

osvdb.org/96077

osvdb.org/96078

secunia.com/advisories/54399

www.securityfocus.com/bid/61638

exchange.xforce.ibmcloud.com/vulnerabilities/86258

issues.apache.org/jira/browse/CLOUDSTACK-2936

5.9 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.7%

JSON

Related for CVE-2013-2136

cvelist1 prion1 seebug1 securityvulns3