Lucene search
HistorySep 05, 2015 - 5:59 p.m.
CVE-2015-2986
cve
2015
2986
xss
vulnerability
rakuto.net
hitsuji
rktsns2
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.1%
Cross-site scripting (XSS) vulnerability in rakuto.net hitSuji (rktSNS2) 0.2.2b allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Affected configurations
Node
rakutorktsns2Match0.2.2b
| CPE | Name | Operator | Version |
|---|---|---|---|
| rakuto:rktsns2 | rakuto rktsns2 | eq | 0.2.2b |
Related
prion
prion
Cross site scripting
2015-09-05 17:59:00
nvd
nvd
CVE-2015-2986
2015-09-05 17:59:01
jvn
jvn
JVN#24692261: hitSuji (rktSNS2) vulnetable to cross-site scripting
2015-09-03 00:00:00
cvelist
cvelist
CVE-2015-2986
2015-09-05 17:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.8 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.1%
Related for CVE-2015-2986