Lucene search

[email protected]NVD:CVE-2008-4696

HistoryOct 23, 2008 - 10:00 p.m.

CVE-2008-4696

2008-10-2322:00:01

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.832

Percentile

98.5%

JSON

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61 allows remote attackers to inject arbitrary web script or HTML via the anchor identifier (aka the “optional fragment”), which is not properly escaped before storage in the History Search database (aka md.dat).

Affected configurations

Nvd

Node

operaopera

operaoperaRange≤9.6

operaoperaMatch5..10

operaoperaMatch5.0

operaoperaMatch5.1

operaoperaMatch5.2

operaoperaMatch5.3

operaoperaMatch5.4

operaoperaMatch5.5

operaoperaMatch5.6

operaoperaMatch5.7

operaoperaMatch5.8

operaoperaMatch5.9

operaoperaMatch5.11

operaoperaMatch5.12

operaoperaMatch6beta_1

operaoperaMatch6.0

operaoperaMatch6.01

operaoperaMatch6.02

operaoperaMatch6.03

operaoperaMatch6.04

operaoperaMatch6.05

operaoperaMatch6.06

operaoperaMatch7beta_1

operaoperaMatch7beta_1.2

operaoperaMatch7.0

operaoperaMatch7.0beta_2

operaoperaMatch7.01

operaoperaMatch7.02

operaoperaMatch7.03

operaoperaMatch7.10

operaoperaMatch7.11

operaoperaMatch7.20

operaoperaMatch7.20beta7

operaoperaMatch7.21

operaoperaMatch7.22

operaoperaMatch7.23

operaoperaMatch7.50

operaoperaMatch7.50beta_1

operaoperaMatch7.51

operaoperaMatch7.52

operaoperaMatch7.53

operaoperaMatch7.54

operaoperaMatch7.54update_1

operaoperaMatch7.54update_2

operaoperaMatch8.0

operaoperaMatch8.0beta_1

operaoperaMatch8.0beta_2

operaoperaMatch8.0beta_3

operaoperaMatch8.01

operaoperaMatch8.02

operaoperaMatch8.50

operaoperaMatch8.51

operaoperaMatch8.52

operaoperaMatch8.53

operaoperaMatch8.54

operaoperaMatch9.0

operaoperaMatch9.0beta_1

operaoperaMatch9.0beta_2

operaoperaMatch9.01

operaoperaMatch9.02

operaoperaMatch9.10

operaoperaMatch9.20

operaoperaMatch9.20beta_1

operaoperaMatch9.21

operaoperaMatch9.22

operaoperaMatch9.23

operaoperaMatch9.24

operaoperaMatch9.25

operaoperaMatch9.26

operaoperaMatch9.27

operaoperaMatch9.50

operaoperaMatch9.50beta_2

operaoperaMatch9.51

VendorProductVersionCPE
operaopera*cpe:2.3:a:opera:opera:*:*:*:*:*:*:*:*
operaopera5..10cpe:2.3:a:opera:opera:5..10:*:*:*:*:*:*:*
operaopera5.0cpe:2.3:a:opera:opera:5.0:*:*:*:*:*:*:*
operaopera5.1cpe:2.3:a:opera:opera:5.1:*:*:*:*:*:*:*
operaopera5.2cpe:2.3:a:opera:opera:5.2:*:*:*:*:*:*:*
operaopera5.3cpe:2.3:a:opera:opera:5.3:*:*:*:*:*:*:*
operaopera5.4cpe:2.3:a:opera:opera:5.4:*:*:*:*:*:*:*
operaopera5.5cpe:2.3:a:opera:opera:5.5:*:*:*:*:*:*:*
operaopera5.6cpe:2.3:a:opera:opera:5.6:*:*:*:*:*:*:*
operaopera5.7cpe:2.3:a:opera:opera:5.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
opera	opera	*	cpe:2.3:a:opera:opera::::::::
opera	opera	5..10	cpe:2.3:a:opera:opera:5..10:::::::*
opera	opera	5.0	cpe:2.3:a:opera:opera:5.0:::::::*
opera	opera	5.1	cpe:2.3:a:opera:opera:5.1:::::::*
opera	opera	5.2	cpe:2.3:a:opera:opera:5.2:::::::*
opera	opera	5.3	cpe:2.3:a:opera:opera:5.3:::::::*
opera	opera	5.4	cpe:2.3:a:opera:opera:5.4:::::::*
opera	opera	5.5	cpe:2.3:a:opera:opera:5.5:::::::*
opera	opera	5.6	cpe:2.3:a:opera:opera:5.6:::::::*
opera	opera	5.7	cpe:2.3:a:opera:opera:5.7:::::::*