Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2020-1696HistoryMar 20, 2020 - 3:15 p.m.
CVE-2020-1696
2020-03-2015:15:00
Debian Security Bug Tracker
security-tracker.debian.org
9
0.001 Low
EPSS
Percentile
22.4%
A flaw was found in the all pki-core 10.x.x versions, where Token Processing Service (TPS) where it did not properly sanitize Profile IDs, enabling a Stored Cross-Site Scripting (XSS) vulnerability when the profile ID is printed. An attacker with sufficient permissions could trick an authenticated victim into executing a specially crafted Javascript code.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 11 | all | dogtag-pki | <= 10.10.2-3 | dogtag-pki_10.10.2-3_all.deb |
| Debian | 999 | all | dogtag-pki | <= 11.2.1-2 | dogtag-pki_11.2.1-2_all.deb |
Related
redhatcve
redhatcve
CVE-2020-1696
2020-02-04 11:17:27
ubuntucve
ubuntucve
CVE-2020-1696
2020-03-20 00:00:00
cvelist
cvelist
CVE-2020-1696
2020-03-20 13:58:49
cve
cve
CVE-2020-1696
2020-03-20 15:15:00
veracode
veracode
Cross-Site Scripting (XSS)
2021-03-23 10:25:54
prion
prion
Cross site scripting
2020-03-20 15:15:00
osv
osv
CVE-2020-1696
2020-03-20 15:15:13
redhat
redhat
nessus
nessus
RHEL 7 : pki-core and redhat-pki-theme (RHSA-2021:0947)
2024-04-27 00:00:00
oraclelinux
oraclelinux
pki-core security and bug fix update
2021-03-17 00:00:00