Cross site scripting

2019-05-0220:29:00

PRIOn knowledge base

www.prio-n.com

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.8%

An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument.

CPENameOperatorVersion
ncbi_toolboxge2.0.7
ncbi_toolboxle2.2.26

CPE	Name	Operator	Version
	ncbi_toolbox	ge	2.0.7
	ncbi_toolbox	le	2.2.26

References

github.com/grymer/CVE/blob/master/CVE-2018-16718.md