Lucene search
+L

7 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 6:03 a.m.•15 views

CVE-2017-16810

Cross-site scripting XSS vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 fixed in 3.13.7 allows remote attackers to inject arbitrary web script or HTML via the Variable Set Name parameter...

5.4CVSS5.9AI score0.00779EPSS
SaveExploits1References1
OpenVAS
OpenVAS
•added 2017/11/21 12:00 a.m.•50 views

Octopus Deploy XSS Vulnerability

Cross-site scripting XSS vulnerability in the All Variables tab in Octopus Deploy allows remote attackers to inject arbitrary web script or HTML via the Variable Set Name parameter. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and...

5.4CVSS5.4AI score0.00779EPSS
SaveExploits1References1
Prion
Prion
•added 2017/11/14 3:29 a.m.•25 views

Cross site scripting

Cross-site scripting XSS vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 fixed in 3.13.7 allows remote attackers to inject arbitrary web script or HTML via the Variable Set Name parameter...

3.5CVSS5.4AI score0.00779EPSS
SaveExploits1References1Affected Software1
NVD
NVD
•added 2017/11/14 3:29 a.m.•24 views

CVE-2017-16810

Cross-site scripting XSS vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 fixed in 3.13.7 allows remote attackers to inject arbitrary web script or HTML via the Variable Set Name parameter...

5.4CVSS5.4AI score0.00779EPSS
SaveExploits1References1
OSV
OSV
•added 2017/11/14 3:29 a.m.•14 views

CVE-2017-16810

Cross-site scripting XSS vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 fixed in 3.13.7 allows remote attackers to inject arbitrary web script or HTML via the Variable Set Name parameter...

5.4CVSS5.9AI score0.00779EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/14 12:00 a.m.•2 views

CVE-2017-16810: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the All Variables tab in Octopus Deploy 3.4.0-3.13.6 fixed in 3.13.7 allows remote attackers to inject arbitrary web script or HTML via the Variable Set Name parameter...

5.4CVSS6AI score0.00779EPSS
SaveExploits1References2
CNVD
CNVD
•added 2017/11/14 12:00 a.m.•13 views

Octopus Deploy 'Variable Set Name' Parameter Cross-Site Scripting Vulnerability

Octopus Deploy is an automation tool from Octopus Deploy Australia for development and deployment of . A cross-site scripting vulnerability exists in the All Variables tag in Octopus Deploy versions 3.4.0-3.13.6. A remote attacker can exploit this vulnerability to inject arbitrary web script or...

5.4CVSS6AI score0.00779EPSS
SaveExploits1References1
Rows per page
Query Builder