Lucene search

[email protected]CVE-2013-4779

HistoryJul 18, 2013 - 4:51 p.m.

CVE-2013-4779

2013-07-1816:51:40

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-4779

cross-site scripting

xss

siemens

openscape branch

session border controller

vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.6%

JSON

Cross-site scripting (XSS) vulnerability in core/handleTw.php on the Siemens Enterprise OpenScape Branch appliance and OpenScape Session Border Controller (SBC) before 2 R0.32.0, and 7 before 7 R1.7.0, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected configurations

NVD

Node

siemensopenscape_session_border_controllerMatch1r4.17.0

siemensopenscape_session_border_controllerMatch7r.0

siemensenterprise_openscape_branchMatch-

CPENameOperatorVersion
siemens:openscape_session_border_controllersiemens openscape session border controllereq1r4.17.0
siemens:openscape_session_border_controllersiemens openscape session border controllereq7r.0
siemens:enterprise_openscape_branchsiemens enterprise openscape brancheq-

CPE	Name	Operator	Version
siemens:openscape_session_border_controller	siemens openscape session border controller	eq	1r4.17.0
siemens:openscape_session_border_controller	siemens openscape session border controller	eq	7r.0
siemens:enterprise_openscape_branch	siemens enterprise openscape branch	eq	-

References

www.securityfocus.com/bid/60555

www.sec-consult.com/fxdata/seccons/prod/temedia/advisories_txt/20130614-0_Siemens_OpenScape_Branch_SBC_Multiple_Vulnerabilities_v10.txt

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.6%

JSON

Related for CVE-2013-4779

prion1 nvd1 cvelist1