Cross site scripting

2017-11-0817:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

31.5%

JSON

RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting (XSS) attack via the service parameter to the /soap URI, triggering an invalid attempt to generate WSDL.

CPENameOperatorVersion
remoting_sdk_9eq1.0.0.0.

CPE	Name	Operator	Version
	remoting_sdk_9	eq	1.0.0.0.

References

talk.remobjects.com/t/reflected-cross-site-scripting-xss-vulnerability/14662

0.001 Low

EPSS

Percentile

31.5%

JSON

Related for PRION:CVE-2017-16665