Lucene search
MitreCVELIST:CVE-2017-9781HistoryJun 21, 2017 - 6:00 p.m.
CVE-2017-9781
2017-06-2118:00:00
mitre
www.cve.org
0.002 Low
EPSS
Percentile
59.8%
A cross site scripting (XSS) vulnerability exists in Check_MK versions 1.4.0x prior to 1.4.0p6, allowing an unauthenticated remote attacker to inject arbitrary HTML or JavaScript via the _username parameter when attempting authentication to webapi.py, which is returned unencoded with content type text/html.
Related
cve
cve
CVE-2017-9781
2017-06-21 18:29:00
ubuntucve
ubuntucve
CVE-2017-9781
2017-06-21 00:00:00
prion
prion
Cross site scripting
2017-06-21 18:29:00
osv
osv
CVE-2017-9781
2017-06-21 18:29:00
check-mk vulnerabilities
2022-07-20 08:36:48
check-mk vulnerabilities
2022-07-20 10:26:46
nvd
nvd
CVE-2017-9781
2017-06-21 18:29:00
nessus
nessus
Check_MK < 1.4.0p6 webapi.py XSS
2017-06-28 00:00:00
Ubuntu 16.04 ESM : Checkmk vulnerabilities (USN-5527-2)
2023-10-23 00:00:00
Ubuntu 18.04 LTS : Checkmk vulnerabilities (USN-5527-1)
2022-07-20 00:00:00
ubuntu
ubuntu
Checkmk vulnerabilities
2022-07-20 00:00:00
Checkmk vulnerabilities
2022-07-20 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5527-2)
2023-01-27 00:00:00
Ubuntu: Security Advisory (USN-5527-1)
2022-07-21 00:00:00