Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2013-2136
HistoryAug 19, 2013 - 11:55 p.m.

CVE-2013-2136

2013-08-1923:55:08
CWE-79
[email protected]
web.nvd.nist.gov
4

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

68.0%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Apache CloudStack before 4.1.1 allow remote attackers to inject arbitrary web script or HTML via the (1) Physical network name to the Zone wizard; (2) New network name, (3) instance name, or (4) group to the Instance wizard; (5) unspecified β€œmulti-edit fields;” and (6) unspecified β€œlist view” edit fields related to global settings.

Affected configurations

Nvd
Node
apachecloudstackRange≀4.1.0
OR
apachecloudstackMatch2.0-community
OR
apachecloudstackMatch2.0.1
OR
apachecloudstackMatch2.1.0
OR
apachecloudstackMatch2.1.1
OR
apachecloudstackMatch2.1.2
OR
apachecloudstackMatch2.1.3
OR
apachecloudstackMatch2.1.4
OR
apachecloudstackMatch2.1.5
OR
apachecloudstackMatch2.1.6
OR
apachecloudstackMatch2.1.7
OR
apachecloudstackMatch2.1.8
OR
apachecloudstackMatch2.1.9
OR
apachecloudstackMatch2.1.10
OR
apachecloudstackMatch2.2.0
OR
apachecloudstackMatch2.2.1
OR
apachecloudstackMatch2.2.2
OR
apachecloudstackMatch2.2.3
OR
apachecloudstackMatch2.2.5
OR
apachecloudstackMatch2.2.6
OR
apachecloudstackMatch2.2.7
OR
apachecloudstackMatch2.2.8
OR
apachecloudstackMatch2.2.9
OR
apachecloudstackMatch2.2.11
OR
apachecloudstackMatch2.2.12
OR
apachecloudstackMatch2.2.13
OR
apachecloudstackMatch2.2.14
OR
apachecloudstackMatch3.0.0
OR
apachecloudstackMatch3.0.1
OR
apachecloudstackMatch3.0.2
OR
apachecloudstackMatch4.0.0incubating
OR
apachecloudstackMatch4.0.1
OR
apachecloudstackMatch4.0.2
VendorProductVersionCPE
apachecloudstack*cpe:2.3:a:apache:cloudstack:*:*:*:*:*:*:*:*
apachecloudstack2.0cpe:2.3:a:apache:cloudstack:2.0:-:community:*:*:*:*:*
apachecloudstack2.0.1cpe:2.3:a:apache:cloudstack:2.0.1:*:*:*:*:*:*:*
apachecloudstack2.1.0cpe:2.3:a:apache:cloudstack:2.1.0:*:*:*:*:*:*:*
apachecloudstack2.1.1cpe:2.3:a:apache:cloudstack:2.1.1:*:*:*:*:*:*:*
apachecloudstack2.1.2cpe:2.3:a:apache:cloudstack:2.1.2:*:*:*:*:*:*:*
apachecloudstack2.1.3cpe:2.3:a:apache:cloudstack:2.1.3:*:*:*:*:*:*:*
apachecloudstack2.1.4cpe:2.3:a:apache:cloudstack:2.1.4:*:*:*:*:*:*:*
apachecloudstack2.1.5cpe:2.3:a:apache:cloudstack:2.1.5:*:*:*:*:*:*:*
apachecloudstack2.1.6cpe:2.3:a:apache:cloudstack:2.1.6:*:*:*:*:*:*:*
Rows per page:
1-10 of 331

Related

securityvulns 3
seebug 1
cve 1
prion 1
cvelist 1
securityvulns
securityvulns
Updated [CVE-2013-2136] Apache CloudStack Cross-site scripting (XSS) vulnerabiliity
2013-09-09 00:00:00
Updated [CVE-2013-6398] CloudStack Virtual Router stop/start modifies firewall rules allowing additional access
2014-01-14 00:00:00
Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
2013-09-09 00:00:00
seebug
seebug
Apache CloudStack倚δΈͺθ·¨η«™θ„šζœ¬ζΌζ΄ž
2013-08-11 00:00:00
cve
cve
CVE-2013-2136
2013-08-19 23:55:08
prion
prion
Cross site scripting
2013-08-19 23:55:00
cvelist
cvelist
CVE-2013-2136
2013-08-19 23:00:00

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.8

Confidence

High

EPSS

0.003

Percentile

68.0%

JSON
Related for NVD:CVE-2013-2136
securityvulns3seebug1cve1prion1cvelist1