CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5 matches found

Prion•added 2019/05/13 1:29 p.m.•23 views

Cross site scripting

Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names...

4.3CVSS6.2AI score0.00692EPSS

SaveExploits1References1Affected Software1

NVD•added 2019/05/13 1:29 p.m.•30 views

CVE-2018-12297

Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names...

6.1CVSS6.3AI score0.00692EPSS

SaveExploits1References1

CVE•added 2019/05/13 12:33 p.m.•62 views

CVE-2018-12297

CVE-2018-12297 affects Seagate NAS OS 4.3.15.1 with XSS in API error pages via URL path names. Root cause cited as insufficient validation of client data by the WEB application; impact is client-side script execution. Exploitation details/works are not provided in the documents; no remediation/ve...

6.1CVSS6.2AI score0.00692EPSS

SaveExploits1References1Affected Software1

Cvelist•added 2019/05/13 12:33 p.m.•33 views

CVE-2018-12297

Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names...

6.3AI score0.00692EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2019/05/13 12:00 a.m.•3 views

CVE-2018-12297: Improper Neutralization of Input During Web Page Generation

Cross-site scripting in API error pages in Seagate NAS OS version 4.3.15.1 allows attackers to execute JavaScript via URL path names...

6.1CVSS6AI score0.00692EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by