Lucene search

[email protected]CVE-2013-7143

HistoryJan 26, 2014 - 8:55 p.m.

CVE-2013-7143

2014-01-2620:55:00

CWE-79

[email protected]

web.nvd.nist.gov

cve-2013-7143

cross-site scripting

xss vulnerability

open-xchange appsuite

nvd

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.2%

JSON

Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite 7.4.1 allows remote attackers to inject arbitrary web script or HTML via the title in a mail filter rule.

CPENameOperatorVersion
open-xchange:open-xchange_appsuiteopen-xchange open-xchange appsuiteeq6.22.1
open-xchange:open-xchange_appsuiteopen-xchange open-xchange appsuitele7.4.1
open-xchange:open-xchange_appsuiteopen-xchange open-xchange appsuiteeq6.22.0
open-xchange:open-xchange_appsuiteopen-xchange open-xchange appsuiteeq7.0.1
open-xchange:open-xchange_appsuiteopen-xchange open-xchange appsuiteeq7.2.2
open-xchange:open-xchange_appsuiteopen-xchange open-xchange appsuiteeq7.0.2
open-xchange:open-xchange_appsuiteopen-xchange open-xchange appsuiteeq7.4.0
open-xchange:open-xchange_appsuiteopen-xchange open-xchange appsuiteeq7.2.0
open-xchange:open-xchange_appsuiteopen-xchange open-xchange appsuiteeq7.2.1
open-xchange:open-xchange_appsuiteopen-xchange open-xchange appsuiteeq6.20.7

CPE	Name	Operator	Version
open-xchange:open-xchange_appsuite	open-xchange open-xchange appsuite	eq	6.22.1
open-xchange:open-xchange_appsuite	open-xchange open-xchange appsuite	le	7.4.1
open-xchange:open-xchange_appsuite	open-xchange open-xchange appsuite	eq	6.22.0
open-xchange:open-xchange_appsuite	open-xchange open-xchange appsuite	eq	7.0.1
open-xchange:open-xchange_appsuite	open-xchange open-xchange appsuite	eq	7.2.2
open-xchange:open-xchange_appsuite	open-xchange open-xchange appsuite	eq	7.0.2
open-xchange:open-xchange_appsuite	open-xchange open-xchange appsuite	eq	7.4.0
open-xchange:open-xchange_appsuite	open-xchange open-xchange appsuite	eq	7.2.0
open-xchange:open-xchange_appsuite	open-xchange open-xchange appsuite	eq	7.2.1
open-xchange:open-xchange_appsuite	open-xchange open-xchange appsuite	eq	6.20.7

References

seclists.org/bugtraq/2014/Jan/57

www.osvdb.org/102195

www.securityfocus.com/bid/65013

www.securitytracker.com/id/1029650

exchange.xforce.ibmcloud.com/vulnerabilities/90546

5.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

65.2%

JSON

Related for CVE-2013-7143

prion1 openvas1 cvelist1 securityvulns1