Lucene search

[email protected]NVD:CVE-2015-4358

HistoryJun 15, 2015 - 2:59 p.m.

CVE-2015-4358

2015-06-1514:59:12

CWE-79

[email protected]

web.nvd.nist.gov

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

Cross-site scripting (XSS) vulnerability in unspecified administration pages in the Ubercart Discount Coupons module 6.x-1.x before 6.x-1.8 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via vectors related to taxonomy terms.

Affected configurations

NVD

Node

ubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.0drupal

ubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.1drupal

ubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.2drupal

ubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.3drupal

ubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.4drupal

ubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.5drupal

ubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.6drupal

ubercart_discount_coupons_projectubercart_discount_couponsMatch6.x-1.7drupal

References

www.openwall.com/lists/oss-security/2015/04/25/6

www.securityfocus.com/bid/72947

www.drupal.org/node/2438357

www.drupal.org/node/2445953

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

Related for NVD:CVE-2015-4358

prion1 drupal1 cve1 cvelist1