PRIOn knowledge basePRION:CVE-2009-4610Cross site scripting
6.1 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
42.2%
Multiple cross-site scripting (XSS) vulnerabilities in Mort Bay Jetty 6.x and 7.0.0 allow remote attackers to inject arbitrary web script or HTML via (1) the query string to jsp/dump.jsp in the JSP Dump feature, or the (2) Name or (3) Value parameter to the default URI for the Session Dump Servlet under session/.
| CPE | Name | Operator | Version |
|---|---|---|---|
| jetty | eq | 6.1.5 | |
| jetty | eq | 6.1.0 | |
| jetty | eq | 6.1.12 rc3 | |
| jetty | eq | 6.0.0 beta14 | |
| jetty | eq | 6.1.0 pre3 | |
| jetty | eq | 6.1.0 rc1 | |
| jetty | eq | 6.1.15 pre0 | |
| jetty | eq | 6.0.0 beta9 | |
| jetty | eq | 6.0.0 beta2 | |
| jetty | eq | 6.0.0 beta15 |
Related
6.1 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.001 Low
EPSS
Percentile
42.2%