Lucene search

K
debianDebianDEBIAN:DLA-453-1:A2B8D
HistoryMay 03, 2016 - 8:28 p.m.

[SECURITY] [DLA 453-1] extplorer security update

2016-05-0320:28:16
lists.debian.org
11

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%

Package : extplorer
Version : 2.1.0b6+dfsg.3-4+deb7u2
CVE ID : CVE-2015-0896
Debian Bug : 783231

Multiple cross-site scripting (XSS) vulnerabilities in eXtplorer before
2.1.7 allow remote attackers to inject arbitrary web script or HTML via
unspecified vectors.

OSVersionArchitecturePackageVersionFilename
Debian7allextplorer< 2.1.0b6+dfsg.3-4+deb7u2extplorer_2.1.0b6+dfsg.3-4+deb7u2_all.deb
Debian6allextplorer< 2.1.0b6+dfsg.2-1+squeeze3extplorer_2.1.0b6+dfsg.2-1+squeeze3_all.deb

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.6 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

56.7%