Lucene search
HistoryJul 03, 2015 - 1:59 a.m.
CVE-2015-3660
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.1
Confidence
High
EPSS
0.003
Percentile
65.3%
Cross-site scripting (XSS) vulnerability in the PDF functionality in WebKit in Apple Safari before 6.2.7, 7.x before 7.1.7, and 8.x before 8.0.7 allows remote attackers to inject arbitrary web script or HTML via a crafted URL in embedded PDF content.
Affected configurations
Node
applesafariRange≤6.2.6
ORapplesafariMatch7.0
ORapplesafariMatch7.0.1
ORapplesafariMatch7.0.2
ORapplesafariMatch7.0.3
ORapplesafariMatch7.0.4
ORapplesafariMatch7.0.5
ORapplesafariMatch7.0.6
ORapplesafariMatch7.1.0
ORapplesafariMatch7.1.1
ORapplesafariMatch7.1.2
ORapplesafariMatch7.1.3
ORapplesafariMatch7.1.4
ORapplesafariMatch7.1.5
ORapplesafariMatch7.1.6
ORapplesafariMatch8.0
ORapplesafariMatch8.0.1
ORapplesafariMatch8.0.2
ORapplesafariMatch8.0.3
ORapplesafariMatch8.0.4
ORapplesafariMatch8.0.5
ORapplesafariMatch8.0.6
| Vendor | Product | Version | CPE |
|---|---|---|---|
| apple | safari | * | cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:* |
| apple | safari | 7.0 | cpe:2.3:a:apple:safari:7.0:*:*:*:*:*:*:* |
| apple | safari | 7.0.1 | cpe:2.3:a:apple:safari:7.0.1:*:*:*:*:*:*:* |
| apple | safari | 7.0.2 | cpe:2.3:a:apple:safari:7.0.2:*:*:*:*:*:*:* |
| apple | safari | 7.0.3 | cpe:2.3:a:apple:safari:7.0.3:*:*:*:*:*:*:* |
| apple | safari | 7.0.4 | cpe:2.3:a:apple:safari:7.0.4:*:*:*:*:*:*:* |
| apple | safari | 7.0.5 | cpe:2.3:a:apple:safari:7.0.5:*:*:*:*:*:*:* |
| apple | safari | 7.0.6 | cpe:2.3:a:apple:safari:7.0.6:*:*:*:*:*:*:* |
| apple | safari | 7.1.0 | cpe:2.3:a:apple:safari:7.1.0:*:*:*:*:*:*:* |
| apple | safari | 7.1.1 | cpe:2.3:a:apple:safari:7.1.1:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2015-3660
2015-07-03 00:00:00
prion
prion
Cross site scripting
2015-07-03 01:59:00
cve
cve
CVE-2015-3660
2015-07-03 01:59:19
cvelist
cvelist
CVE-2015-3660
2015-07-03 01:00:00
nessus
nessus
Safari < 6.2.7 / 7.1.7 / 8.0.7 Multiple Vulnerabilities
2015-10-01 00:00:00
Mac OS X : Apple Safari < 6.2.7 / 7.1.7 / 8.0.7 Multiple Vulnerabilities
2015-07-01 00:00:00
Fedora 22 : webkitgtk4-2.10.4-1.fc22 (2016-d132dbb529)
2016-03-04 00:00:00
securityvulns
securityvulns
Apple Safari / Webkit multiple security vulnerabilities
2015-07-05 00:00:00
APPLE-SA-2015-06-30-4 Safari 8.0.7, Safari 7.1.7, and Safari 6.2.7
2015-07-05 00:00:00
openvas
openvas
Apple Safari Multiple Vulnerabilities-01 (Jul 2015) - Mac OS X
2015-07-08 00:00:00
Mageia: Security Advisory (MGASA-2016-0116)
2016-03-31 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: webkitgtk4-2.10.4-1.fc22
2016-02-01 06:38:54
mageia
mageia
Updated webkit2 packages fix security vulnerability
2016-03-25 09:38:37
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
AI Score
5.1
Confidence
High
EPSS
0.003
Percentile
65.3%
Related for NVD:CVE-2015-3660