Basic search

K
ubuntucveUbuntu.comUB:CVE-2010-2543
HistoryAug 23, 2010 - 12:00 a.m.

CVE-2010-2543

2010-08-2300:00:00
ubuntu.com
ubuntu.com
10

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.4%

Cross-site scripting (XSS) vulnerability in include/top_graph_header.php in
Cacti before 0.8.7g allows remote attackers to inject arbitrary web script
or HTML via the graph_start parameter to graph.php. NOTE: this
vulnerability exists because of an incorrect fix for CVE-2009-4032.2.b.

OSVersionArchitecturePackageVersionFilename
ubuntu10.04noarchcacti< 0.8.7e-2ubuntu0.1UNKNOWN
ubuntu10.10noarchcacti< 0.8.7g-1UNKNOWN
ubuntu11.04noarchcacti< 0.8.7g-1UNKNOWN
ubuntu11.10noarchcacti< 0.8.7g-1UNKNOWN

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

67.4%

Related for UB:CVE-2010-2543