Lucene search

K
nvd[email protected]NVD:CVE-2007-5613
HistoryDec 05, 2007 - 11:46 a.m.

CVE-2007-5613

2007-12-0511:46:00
CWE-79
web.nvd.nist.gov
6

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.011

Percentile

85.0%

Cross-site scripting (XSS) vulnerability in Dump Servlet in Mortbay Jetty before 6.1.6rc1 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters and cookies.

Affected configurations

Nvd
Node
mortbay_jettyjettyMatch1.0
OR
mortbay_jettyjettyMatch2.4
OR
mortbay_jettyjettyMatch3.0
OR
mortbay_jettyjettyMatch3.1
OR
mortbay_jettyjettyMatch4.0
OR
mortbay_jettyjettyMatch4.1
OR
mortbay_jettyjettyMatch4.2
OR
mortbay_jettyjettyMatch5
OR
mortbay_jettyjettyMatch5.1
OR
mortbay_jettyjettyMatch6
OR
mortbay_jettyjettyMatch6.1
VendorProductVersionCPE
mortbay_jettyjetty1.0cpe:2.3:a:mortbay_jetty:jetty:1.0:*:*:*:*:*:*:*
mortbay_jettyjetty2.4cpe:2.3:a:mortbay_jetty:jetty:2.4:*:*:*:*:*:*:*
mortbay_jettyjetty3.0cpe:2.3:a:mortbay_jetty:jetty:3.0:*:*:*:*:*:*:*
mortbay_jettyjetty3.1cpe:2.3:a:mortbay_jetty:jetty:3.1:*:*:*:*:*:*:*
mortbay_jettyjetty4.0cpe:2.3:a:mortbay_jetty:jetty:4.0:*:*:*:*:*:*:*
mortbay_jettyjetty4.1cpe:2.3:a:mortbay_jetty:jetty:4.1:*:*:*:*:*:*:*
mortbay_jettyjetty4.2cpe:2.3:a:mortbay_jetty:jetty:4.2:*:*:*:*:*:*:*
mortbay_jettyjetty5cpe:2.3:a:mortbay_jetty:jetty:5:*:*:*:*:*:*:*
mortbay_jettyjetty5.1cpe:2.3:a:mortbay_jetty:jetty:5.1:*:*:*:*:*:*:*
mortbay_jettyjetty6cpe:2.3:a:mortbay_jetty:jetty:6:*:*:*:*:*:*:*
Rows per page:
1-10 of 111

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.6

Confidence

High

EPSS

0.011

Percentile

85.0%