2 matches found
CVE-2018-16718: Improper Neutralization of Input During Web Page Generation
An XSS vulnerability exists in wwwblast.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox via a crafted -z1 argument...
6.1CVSS5.8AI score0.0084EPSS
SaveExploits0References2
PT-2019-9369
Name of the Vulnerable Software and Affected Versions NCBI ToolBox versions 2.0.7 through 2.2.26 Description A cross-site scripting XSS issue exists due to a crafted -z1 argument. Recommendations For versions 2.0.7 through 2.2.26, avoid using the -z1 argument until a fix is available...
6.1CVSS0.0084EPSS
SaveExploits0References3
20