Lucene search
HistoryDec 20, 2005 - 11:03 a.m.
CVE-2005-4409
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.003
Percentile
65.8%
Cross-site scripting (XSS) vulnerability in MMBase 1.7.4 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified search parameters.
Affected configurations
Node
mmbasemmbaseMatch1.5.1
ORmmbasemmbaseMatch1.6.0
ORmmbasemmbaseMatch1.6.1
ORmmbasemmbaseMatch1.6.2
ORmmbasemmbaseMatch1.6.3
ORmmbasemmbaseMatch1.6.4
ORmmbasemmbaseMatch1.6.5
ORmmbasemmbaseMatch1.7.0
ORmmbasemmbaseMatch1.7.0_rc1
ORmmbasemmbaseMatch1.7.0_rc2
ORmmbasemmbaseMatch1.7.0_rc3
ORmmbasemmbaseMatch1.7.1
ORmmbasemmbaseMatch1.7.2
ORmmbasemmbaseMatch1.7.3
ORmmbasemmbaseMatch1.7.4
ORmmbasemmbaseMatch1.7.4_rc1
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.8
Confidence
High
EPSS
0.003
Percentile
65.8%
Related for NVD:CVE-2005-4409