CVE-2008-0717

{"id": "CVE-2008-0717", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2008-02-12T02:00:00.000", "references": [{"url": "http://secunia.com/advisories/28785", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www-1.ibm.com/support/docview.wss?uid=swg21294776", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/27665", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1019315", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/0446", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/28785", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-1.ibm.com/support/docview.wss?uid=swg21294776", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/27665", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securitytracker.com/id?1019315", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2008/0446", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Cross-site scripting (XSS) vulnerability in Caching Proxy (CP) 5.1 through 6.1 in IBM WebSphere Edge Server, when CGI mapping rules are enabled, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors that trigger injection into an error response."}, {"lang": "es", "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en Caching Proxy (CP) de 5.1 a 6.1 en IBM WebSphere Edge Server, cuando las reglas de mapeo est\u00e1n activadas. Permite a atacantes remotos inyectar secuencias de comandos web o html de su elecci\u00f3n a trav\u00e9s de vectores sin especificar que disparan la inyecci\u00f3n a una respuesta de error."}], "lastModified": "2024-11-21T00:42:44.833", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:websphere_edge_server:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "08801EB3-65CB-4C51-9AD0-6C0D673EAEEF"}, {"criteria": "cpe:2.3:a:ibm:websphere_edge_server:5.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1AA9C622-E53C-4A4F-9E5D-3FC8FFF1BA01"}, {"criteria": "cpe:2.3:a:ibm:websphere_edge_server:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "715D4F1E-D987-4F4A-BAD2-CEDA473A8D78"}, {"criteria": "cpe:2.3:a:ibm:websphere_edge_server:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "59D58504-D784-4571-B1B9-2B1E9B27BCB3"}, {"criteria": "cpe:2.3:a:ibm:websphere_edge_server:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A88AE0E9-6DAC-4DF4-8064-9744252AFAE9"}, {"criteria": "cpe:2.3:a:ibm:websphere_edge_server:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6484BEC4-E15B-4C8D-A241-55FD5DE9E7DC"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}