Lucene search
HistoryJan 06, 2009 - 5:30 p.m.
CVE-2008-5858
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.7%
Multiple cross-site scripting (XSS) vulnerabilities in KnowledgeTree before 3.5.4a allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-4281.
Affected configurations
Node
knowledgetree_document_managementknowledgetree_document_managementRange≤3.5.4
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.0.0
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.0.1
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.0.2
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.0.3
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.0.3a
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.0.3b
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.1
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.1a
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.1b
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.3
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.3.1
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.3.2
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.3.3
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.3.4
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.3.5
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.3.6
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.3.7
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.4
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.4.1
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.4.2
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.4.3
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.4.4
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.4.5
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.4.6
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.4a
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.5.2
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.5.2a
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.5.2b
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.5.2c
ORknowledgetree_document_managementknowledgetree_document_managementMatch3.5.3
Related
prion
prion
Cross site scripting
2009-01-06 17:30:00
Cross site scripting
2007-08-09 21:17:00
cve
cve
CVE-2008-5858
2009-01-06 17:30:00
CVE-2007-4281
2007-08-09 21:17:00
cvelist
cvelist
CVE-2008-5858
2009-01-06 17:00:00
CVE-2007-4281
2007-08-09 21:00:00
ubuntucve
ubuntucve
CVE-2008-5858
2009-01-06 00:00:00
nvd
nvd
CVE-2007-4281
2007-08-09 21:17:00
packetstorm
packetstorm
KnowledgeTree OSS 3.0.3b Cross Site Scripting
2015-08-30 00:00:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
5.7 Medium
AI Score
Confidence
High
0.007 Low
EPSS
Percentile
80.7%
Related for NVD:CVE-2008-5858