Lucene search

K
ubuntucveUbuntu.comUB:CVE-2010-4183
HistoryNov 05, 2010 - 12:00 a.m.

CVE-2010-4183

2010-11-0500:00:00
ubuntu.com
ubuntu.com
13

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

68.6%

Multiple cross-site scripting (XSS) vulnerabilities in HTML Purifier before
4.1.0, when Internet Explorer is used, allow remote attackers to inject
arbitrary web script or HTML via a crafted (1) background-image, (2)
background, or (3) font-family Cascading Style Sheets (CSS) property, a
different vulnerability than CVE-2010-2479.

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

68.6%