CVE-2013-4181

2013-09-1619:14:38

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-4181

xss

ovirt engine

red hat enterprise virtualization

rhev-m

remote attackers

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.2%

JSON

Cross-site scripting (XSS) vulnerability in the addAlert function in the RedirectServlet servlet in oVirt Engine and Red Hat Enterprise Virtualization Manager (RHEV-M), as used in Red Hat Enterprise Virtualization 3 and 3.2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

redhatenterprise_virtualizationMatch3.0

redhatenterprise_virtualizationMatch3.2

CPENameOperatorVersion
redhat:enterprise_virtualizationredhat enterprise virtualizationeq3.0
redhat:enterprise_virtualizationredhat enterprise virtualizationeq3.2