Lucene search

K
nvd[email protected]NVD:CVE-2005-0407
HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0407

2005-05-0204:00:00
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.5%

Cross-site scripting (XSS) vulnerability in Openconf 1.04, and possibly other versions before 1.10, allows remote attackers to inject arbitrary HTML and web script via the paper title.

Affected configurations

NVD
Node
zakon_groupopenconfMatch1.0
OR
zakon_groupopenconfMatch1.0_beta1
OR
zakon_groupopenconfMatch1.0_beta2
OR
zakon_groupopenconfMatch1.0_rc1
OR
zakon_groupopenconfMatch1.0_rc2
OR
zakon_groupopenconfMatch1.01
OR
zakon_groupopenconfMatch1.02
OR
zakon_groupopenconfMatch1.03
OR
zakon_groupopenconfMatch1.04

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

73.5%

Related for NVD:CVE-2005-0407