Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in
CiscoOpenresolve

2 matches found

CVE
CVE•added 2023/01/02 8:55 p.m.•48 views

CVE-2015-10010

CVE-2015-10010 affects OpenDNS OpenResolve API: the get function in resolverapi/endpoints.py enables cross-site scripting. Exploitation is remote; attack complexity is high and exploitation is reportedly difficult. The patch c680170d5583cd9342fe1af43001fe8b2b8004dd fixes this issue; applying the ...

6.1CVSS4.8AI score0.00558EPSS
CVE
CVE•added 2023/01/02 9:0 p.m.•48 views

CVE-2015-10011

CVE-2015-10011 affects OpenDNS OpenResolve, specifically the resolverapi/endpoints.py component. The root cause is improper output neutralization for logs, enabling high-severity impact per CVSSv3.1 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, base score 9.8). A patch is identified (9eba6ba5abd...

9.8CVSS7.1AI score0.0086EPSS