CVE-2005-3758

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary…

published November 22, 2005

CVSS

—

EPSS

19%

Percentile

97.3

In the wild

Unconfirmed

What it is

Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary Javascript, and possibly other web script or HTML, via a proxystylesheet variable that contains a malicious XSLT style sheet.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.19110 · 97.3th percentile
Published: 2005-11-22T21:00Z

EPSS history

Timeline

22 NOV 21:00Z
Cross-site scripting (XSS) vulnerability in Google Mini Search Appliance, and possibly Google Search Appliance, allows remote attackers to inject arbitrary…
cvelistv5