Lucene search

K
osvGoogleOSV:GHSA-VV6J-5X58-Q2C3
HistoryMay 01, 2022 - 11:38 p.m.

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF)

2022-05-0123:38:35
Google
osv.dev
50

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.3%

Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors.

CPENameOperatorVersion
com.sun.faces:jsf-apieq1.2

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

73.3%

Related for OSV:GHSA-VV6J-5X58-Q2C3