Lucene search

K
debiancveDebian Security Bug TrackerDEBIANCVE:CVE-2014-6070
HistorySep 11, 2014 - 2:16 p.m.

CVE-2014-6070

2014-09-1114:16:04
Debian Security Bug Tracker
security-tracker.debian.org
5

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

67.8%

Multiple cross-site scripting (XSS) vulnerabilities in Adiscon LogAnalyzer before 3.6.6 allow remote attackers to inject arbitrary web script or HTML via the hostname in (1) index.php or (2) detail.php.

OSVersionArchitecturePackageVersionFilename
Debian10allloganalyzer< 3.6.6+dfsg-1loganalyzer_3.6.6+dfsg-1_all.deb

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.003

Percentile

67.8%