Lucene search

PRIOn knowledge basePRION:CVE-2006-2484

HistoryMay 19, 2006 - 11:02 p.m.

Cross site scripting

2006-05-1923:02:00

PRIOn knowledge base

www.prio-n.com

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

71.4%

JSON

Cross-site scripting (XSS) vulnerability in index.html in IceWarp WebMail 5.5.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the PHPSESSID parameter.

CPENameOperatorVersion
web_maileq4.1.5
web_maileq3.5.0
web_maileq3.4.1
web_maileq3.3.1
web_maileq5.2.7
web_maileq5.2.8
web_maileq3.4.2
web_maileq1.40.00
web_maileq1.40.10
web_maileq3.5.1

Name	Operator	Version
web_mail	eq	4.1.5
web_mail	eq	3.5.0
web_mail	eq	3.4.1
web_mail	eq	3.3.1
web_mail	eq	5.2.7
web_mail	eq	5.2.8
web_mail	eq	3.4.2
web_mail	eq	1.40.00
web_mail	eq	1.40.10
web_mail	eq	3.5.1

Rows per page:

1-10 of 181

References

securityreason.com/securityalert/925

www.securityfocus.com/archive/1/434121/100/0/threaded

www.securityfocus.com/bid/17995

exchange.xforce.ibmcloud.com/vulnerabilities/26680

6.2 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.004 Low

EPSS

Percentile

71.4%

JSON

Related for PRION:CVE-2006-2484

cve1