CVE-2005-3757

The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and…

published November 22, 2005

CVSS
—
EPSS
41%
Percentile
98.7
In the wild
Unconfirmed
What it is

The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and execute arbitrary code via dangerous Java class methods in select attribute of xsl:value-of tags in XSLT style sheets, such as (1) system-property, (2) sys:getProperty, and (3) run:exec.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.41250 · 98.7th percentile
Published
2005-11-22T21:00Z
EPSS history
Timeline
  • 22 NOV 21:00Z
    The Saxon XSLT parser in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to obtain sensitive information and…
    cvelistv5