Lucene search
HistoryMar 03, 2015 - 7:59 p.m.
CVE-2015-2197
cve
2015-2197
cross-site scripting
xss
vulnerability
drupal
entity api
nvd
5.4 Medium
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
36.2%
Cross-site scripting (XSS) vulnerability in the Entity API module before 7.x-1.6 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via a field label in the Token API.
| CPE | Name | Operator | Version |
|---|---|---|---|
| entity_api_project:entity_api | entity api project entity api | le | 7.x-1.5 |
Related
prion
prion
Cross site scripting
2015-03-03 19:59:00
cvelist
cvelist
CVE-2015-2197
2022-10-03 16:16:10
drupal
drupal
SA-CONTRIB-2015-053 - Entity API - Cross Site Scripting (XSS)
2015-02-25 00:00:00
5.4 Medium
AI Score
Confidence
High
3.5 Low
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
36.2%
Related for CVE-2015-2197