CVE-2015-7706

🗓️ 11 Jan 2016 15:00:00Reported by mitreType

cve

cve🔗 web.nvd.nist.gov👁 46 Views🌐 WEB

CVE-2015-7706 XSS vulnerabilities in Secure Data Space SDS-API before 3.5.

Reporter	Title	Published	Views	Family All 7
0day.today	Secure Data Space 3.1.1-2 Cross Site Scripting Vulnerability	13 Dec 201500:00	–	zdt
CNVD	SSP EUROPE Secure Data Space SDS-API Cross-Site Scripting Vulnerability	13 Jan 201600:00	–	cnvd
Cvelist	CVE-2015-7706	11 Jan 201615:00	–	cvelist
EUVD	EUVD-2015-7607	7 Oct 202500:30	–	euvd
NVD	CVE-2015-7706	11 Jan 201615:59	–	nvd
Packet Storm	Secure Data Space 3.1.1-2 Cross Site Scripting	11 Dec 201500:00	–	packetstorm
Prion	Cross site scripting	11 Jan 201615:59	–	prion

NVD

Node

ssp-europe secure_data_spaceMatch3.4.14

Source	Link
seclists	www.seclists.org/fulldisclosure/2015/Dec/36
packetstormsecurity	www.packetstormsecurity.com/files/134760/Secure-Data-Space-3.1.1-2-Cross-Site-Scripting.html
securityfocus	www.securityfocus.com/archive/1/537069/100/0/threaded
kb	www.kb.ssp-europe.eu/pages/viewpage.action

Parameter	Position	Path	Description	CWE
authType	request body	api/v3/auth/login	XSS via authType parameter in login	CWE-79
login	request body	api/v3/auth/reset_password	XSS via login parameter in reset_password	CWE-79

06 May 2026 22:30Current

6Medium risk

Vulners AI Score6

CVSS 24.3

CVSS 36.1

EPSS0.00255

cve-2015-7706 xss cross-site scripting secure data space sds-api nvd vulnerability web security