Lucene search

K
cve[email protected]CVE-2013-3192
HistoryAug 14, 2013 - 11:10 a.m.

CVE-2013-3192

2013-08-1411:10:36
CWE-79
web.nvd.nist.gov
98
cve-2013-3192
cross-site scripting
xss
internet explorer
euc-jp
encoding

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.884 High

EPSS

Percentile

98.7%

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script or HTML via crafted character sequences with EUC-JP encoding, aka “EUC-JP Character Encoding Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorerMatch6
OR
microsoftinternet_explorerMatch7
OR
microsoftinternet_explorerMatch8
OR
microsoftinternet_explorerMatch9
OR
microsoftinternet_explorerMatch10

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.6 Medium

AI Score

Confidence

High

0.884 High

EPSS

Percentile

98.7%