CVE-2006-5652

Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the…

published November 3, 2006

CVSS
—
EPSS
2%
Percentile
76.8
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the expression Cascading Style Sheets (CSS) function, as demonstrated by setting the width style for an IMG element. NOTE: this issue might be related to CVE-2006-5486, however due to the vagueness of the initial advisory and different researchers, it has been assigned a new CVE.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01680 · 76.8th percentile
Published
2006-11-03T00:00Z
EPSS history
Timeline
  • 03 NOV 00:00Z
    Cross-site scripting (XSS) vulnerability in Sun iPlanet Messaging Server Messenger Express allows remote attackers to inject arbitrary web script via the…
    cvelistv5