Lucene search

K
ubuntucveUbuntu.comUB:CVE-2017-14239
HistorySep 11, 2017 - 12:00 a.m.

CVE-2017-14239

2017-09-1100:00:00
ubuntu.com
ubuntu.com
7

0.001 Low

EPSS

Percentile

28.4%

Multiple cross-site scripting (XSS) vulnerabilities in Dolibarr ERP/CRM
6.0.0 allow remote authenticated users to inject arbitrary web script or
HTML via the (1) CompanyName, (2) CompanyAddress, (3) CompanyZip, (4)
CompanyTown, (5) Fax, (6) EMail, (7) Web, (8) ManagingDirectors, (9) Note,
(10) Capital, (11) ProfId1, (12) ProfId2, (13) ProfId3, (14) ProfId4, (15)
ProfId5, or (16) ProfId6 parameter to htdocs/admin/company.php.

OSVersionArchitecturePackageVersionFilename
ubuntu16.04noarchdolibarr< anyUNKNOWN

0.001 Low

EPSS

Percentile

28.4%