Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
f5F5F5:K32412075
HistoryJul 23, 2021 - 12:00 a.m.

K32412075 : AngularJS XSS vulnerability CVE-2020-7676

2021-07-2300:00:00
my.f5.com
49

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.2 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.0%

JSON

Security Advisory Description

angular.js prior to 1.8.0 allows cross site scripting. The regex-based input HTML replacement may turn sanitized code into unsanitized one. Wrapping “<option>” elements in “<select>” ones changes parsing behavior, leading to possibly unsanitizing code. (CVE-2020-7676)

Impact

An attacker may exploit this vulnerability to perform a cross-site scripting (XSS) attack.

Related

ibm 16
debiancve 1
prion 1
redhatcve 1
osv 2
cve 1
ubuntucve 1
githubexploit 1
veracode 1
github 1
nessus 3
redhat 7
ibm
ibm
Security Bulletin: A cross-site scripting vulnerability in Angular.js affects IBM InfoSphere Information Server
2021-06-17 23:04:52
Security Bulletin: A security vulnerability in angular.js affects IBM Cloud Pak for Multicloud Management Infrastructure Management and Managed Service.
2020-12-14 18:31:49
Security Bulletin: A security vulnerability in angular.js affects IBM Cloud Automation Manager.
2020-11-26 21:28:07
debiancve
debiancve
CVE-2020-7676
2020-06-08 14:15:00
prion
prion
Cross site scripting
2020-06-08 14:15:00
redhatcve
redhatcve
CVE-2020-7676
2020-06-19 20:29:14
osv
osv
Cross site scripting in Angular
2020-06-18 14:19:58
CVE-2020-7676
2020-06-08 14:15:13
cve
cve
CVE-2020-7676
2020-06-08 14:15:00
ubuntucve
ubuntucve
CVE-2020-7676
2020-06-08 00:00:00
githubexploit
githubexploit
Exploit for Cross-site Scripting in Angularjs Angular.Js
2020-12-01 09:45:48
veracode
veracode
Cross-site Scripting (XSS)
2020-06-09 02:33:32
github
github
Cross site scripting in Angular
2020-06-18 14:19:58
nessus
nessus
RHEL 7 : Red Hat Single Sign-On 7.4.6 security update on RHEL 7 (Low) (RHSA-2021:0968)
2021-03-23 00:00:00
RHEL 8 : Red Hat Single Sign-On 7.4.6 security update on RHEL 8 (Low) (RHSA-2021:0969)
2021-03-23 00:00:00
RHEL 6 : Red Hat Single Sign-On 7.4.6 security update on RHEL 6 (Low) (RHSA-2021:0967)
2021-03-23 00:00:00
redhat
redhat
(RHSA-2021:0967) Low: Red Hat Single Sign-On 7.4.6 security update on RHEL 6
2021-03-23 13:38:50
(RHSA-2021:0969) Low: Red Hat Single Sign-On 7.4.6 security update on RHEL 8
2021-03-23 13:39:03
(RHSA-2021:0968) Low: Red Hat Single Sign-On 7.4.6 security update on RHEL 7
2021-03-23 13:38:56

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5.2 Medium

AI Score

Confidence

High

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

0.002 Low

EPSS

Percentile

60.0%

JSON
Related for F5:K32412075
ibm16debiancve1prion1redhatcve1osv2cve1ubuntucve1githubexploit1veracode1github1nessus3redhat7