Cross site scripting

2007-09-0810:17:00

PRIOn knowledge base

www.prio-n.com

5.6 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

64.9%

JSON

The javadoc tool in Cosminexus Developer’s Kit for Java in Cosminexus 7 and 7.5 can generate HTML documents that contain cross-site scripting (XSS) vulnerabilities, which allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. NOTE: this is probably the same issue as CVE-2007-3503.

CPENameOperatorVersion
ucosminexus_application_server_enterpriseeq7201 windows
ucosminexus_application_server_enterpriseeq7101 windows
ucosminexus_application_server_enterpriseeq7-20 windows
ucosminexus_application_server_enterpriseeq70 hpuxipf
ucosminexus_application_server_enterpriseeq701 linux
ucosminexus_application_server_enterpriseeq701 windows
ucosminexus_application_server_enterpriseeq7-10 hpux
ucosminexus_application_server_enterpriseeq710 hpuxipf
ucosminexus_application_server_enterpriseeq7-0 solaris
ucosminexus_application_server_enterpriseeq7-10 linux

Name	Operator	Version
ucosminexus_application_server_enterprise	eq	7201 windows
ucosminexus_application_server_enterprise	eq	7101 windows
ucosminexus_application_server_enterprise	eq	7-20 windows
ucosminexus_application_server_enterprise	eq	70 hpuxipf
ucosminexus_application_server_enterprise	eq	701 linux
ucosminexus_application_server_enterprise	eq	701 windows
ucosminexus_application_server_enterprise	eq	7-10 hpux
ucosminexus_application_server_enterprise	eq	710 hpuxipf
ucosminexus_application_server_enterprise	eq	7-0 solaris
ucosminexus_application_server_enterprise	eq	7-10 linux