Lucene search

K
ubuntucveUbuntu.comUB:CVE-2008-4696
HistoryOct 23, 2008 - 12:00 a.m.

CVE-2008-4696

2008-10-2300:00:00
ubuntu.com
ubuntu.com
9

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.856 High

EPSS

Percentile

98.6%

Cross-site scripting (XSS) vulnerability in Opera.dll in Opera before 9.61
allows remote attackers to inject arbitrary web script or HTML via the
anchor identifier (aka the “optional fragment”), which is not properly
escaped before storage in the History Search database (aka md.dat).

4.3 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.856 High

EPSS

Percentile

98.6%