Lucene search

[email protected]NVD:CVE-2016-8505

HistoryOct 26, 2016 - 6:59 p.m.

CVE-2016-8505

2016-10-2618:59:07

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

41.1%

JSON

XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.

Affected configurations

Nvd

Node

yandexyandex.browserRange≤16.4.0.94.4

VendorProductVersionCPE
yandexyandex.browser*cpe:2.3:a:yandex:yandex.browser:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
yandex	yandex.browser	*	cpe:2.3:a:yandex:yandex.browser::::::::

References

www.securityfocus.com/bid/93925

browser.yandex.com/security/changelogs/

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

41.1%

JSON

Related for NVD:CVE-2016-8505

prion1 cve1 cvelist1 kaspersky1