Lucene search

K
githubGitHub Advisory DatabaseGHSA-VV6J-5X58-Q2C3
HistoryMay 01, 2022 - 11:38 p.m.

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)

2022-05-0123:38:35
CWE-79
GitHub Advisory Database
github.com
20

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.3%

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CPENameOperatorVersion
com.sun.faces:jsf-apilt1.2.08

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.3%

Related for GHSA-VV6J-5X58-Q2C3