Lucene search
Veracode Vulnerability DatabaseVERACODE:10896HistoryJan 15, 2019 - 8:53 a.m.
Cross-site Scripting (XSS)
2019-01-1508:53:51
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10
EPSS
0.003
Percentile
65.7%
pki-tps is vulnerable to cross-site scripting. A lack of input validation and sanitization allows a remote attacker to inject arbitrary Javascript into a victim’s browser via the PATH_INFO variable to steal session tokens or perform unwanted actions on behalf of the user.
References
Related
nvd
nvd
CVE-2013-1885
2014-01-24 16:55:03
prion
prion
Cross site scripting
2014-01-24 16:55:00
cve
cve
CVE-2013-1885
2014-01-24 16:55:03
cvelist
cvelist
CVE-2013-1885
2014-01-24 16:00:00
openvas
openvas
Fedora Update for pki-tps FEDORA-2013-9258
2013-06-07 00:00:00
Fedora Update for pki-tps FEDORA-2013-9258
2013-06-07 00:00:00
redhat
redhat
(RHSA-2013:0856) Important: pki-tps security update
2013-05-22 00:00:00
veracode
veracode
Arbitrary Code Execution
2019-05-02 04:45:18
fedora
fedora
[SECURITY] Fedora 17 Update: pki-tps-9.0.11-1.fc17
2013-06-06 01:41:43
nessus
nessus
Fedora 17 : pki-tps-9.0.11-1.fc17 (2013-9258)
2013-07-12 00:00:00
RHEL 5 : pki-tps (RHSA-2013:0856)
2014-11-08 00:00:00