Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-5165
HistoryJun 11, 2018 - 9:29 p.m.

CVE-2018-5165

2018-06-1121:29:15
[email protected]
web.nvd.nist.gov
10

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

50.4%

JSON

In 32-bit versions of Firefox, the Adobe Flash plugin setting for “Enable Adobe Flash protected mode” is unchecked by default even though the Adobe Flash sandbox is actually enabled. The displayed state is the reverse of the true setting, resulting in user confusion. This could cause users to select this setting intending to activate it and inadvertently turn protections off. This vulnerability affects Firefox < 60.

Affected configurations

Nvd
Node
mozillafirefoxRange<60.0x86
VendorProductVersionCPE
mozillafirefox*cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:x86:*

Related

prion 1
ubuntucve 1
openvas 4
cve 1
cvelist 1
redhatcve 1
debiancve 1
nessus 4
altlinux 1
mozilla 1
freebsd 1
kaspersky 1
osv 1
prion
prion
Type confusion
2018-06-11 21:29:00
ubuntucve
ubuntucve
CVE-2018-5165
2018-06-11 00:00:00
openvas
openvas
Mozilla Firefox Security Bypass Vulnerability (MFSA2018-11, MFSA2018-12) - Windows
2018-05-11 00:00:00
Mozilla Firefox Security Advisories (MFSA2018-11, MFSA2018-12) - Mac OS X
2018-05-11 00:00:00
Mozilla Firefox Security Advisory (MFSA2018-11) - Linux
2021-11-08 00:00:00
cve
cve
CVE-2018-5165
2018-06-11 21:29:15
cvelist
cvelist
CVE-2018-5165
2018-06-11 21:00:00
redhatcve
redhatcve
CVE-2018-5165
2018-05-10 06:23:20
debiancve
debiancve
CVE-2018-5165
2018-06-11 21:29:15
nessus
nessus
Mozilla Firefox < 60 Multiple Critical Vulnerabilities (macOS)
2018-05-17 00:00:00
Mozilla Firefox < 60 Multiple Critical Vulnerabilities
2018-05-17 00:00:00
FreeBSD : mozilla -- multiple vulnerabilities (5aefc41e-d304-4ec8-8c82-824f84f08244)
2018-05-10 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package firefox-esr version 60.0.1-alt1
2018-06-05 00:00:00
mozilla
mozilla
Security vulnerabilities fixed in Firefox 60 — Mozilla
2018-05-09 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2018-05-09 00:00:00
kaspersky
kaspersky
KLA11246 Multiple vulnerabilities in Mozilla Firefox and Firefox ESR
2018-05-09 00:00:00
osv
osv
MozillaFirefox-92.0-1.2 on GA media
2024-06-15 00:00:00

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

50.4%

JSON
Related for NVD:CVE-2018-5165
prion1ubuntucve1openvas4cve1cvelist1redhatcve1debiancve1nessus4altlinux1mozilla1freebsd1kaspersky1osv1