Lucene search

[email protected]CVE-2018-16235

HistoryOct 23, 2018 - 9:30 p.m.

CVE-2018-16235

2018-10-2321:30:53

CWE-79

[email protected]

web.nvd.nist.gov

cve-2018-16235

telligent community

xss

feed rss widget

nvd

information security

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.002 Low

EPSS

Percentile

51.9%

JSON

Telligent Community 6.x, 7.x, 8.x, 9.x before 9.2.10.11796, 10.1.x before 10.1.10.11792, and 10.2.x before 10.2.3.4725 has XSS via the Feed RSS widget.

Affected configurations

NVD

Node

telligentcommunityRange7.0–7.6

telligentcommunityRange8.0–8.5

telligentcommunityRange9.0–9.2.10.11796

telligentcommunityRange10.1–10.1.10.11792

telligentcommunityRange10.2–10.2.3.4725

telligentcommunityMatch6.0

CPENameOperatorVersion
telligent:communitytelligent communityle7.6
telligent:communitytelligent communityle8.5
telligent:communitytelligent communitylt9.2.10.11796
telligent:communitytelligent communitylt10.1.10.11792
telligent:communitytelligent communitylt10.2.3.4725
telligent:communitytelligent communityeq6.0

CPE	Name	Operator	Version
telligent:community	telligent community	le	7.6
telligent:community	telligent community	le	8.5
telligent:community	telligent community	lt	9.2.10.11796
telligent:community	telligent community	lt	10.1.10.11792
telligent:community	telligent community	lt	10.2.3.4725
telligent:community	telligent community	eq	6.0

References

community.telligent.com/community/10/w/user-documentation/61996/release-notes

community.telligent.com/community/9/w/user-documentation/52752/release-notes

www.horizonsecurity.it/lang_EN/advisories/?a=10

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

0.002 Low

EPSS

Percentile

51.9%

JSON

Related for CVE-2018-16235

cvelist1 nvd1 prion1