CVE-2015-3443

Cross-site scripting (XSS) vulnerability in the basic dashboard in Thycotic Secret Server 8.6.x, 8.7.x, and 8.8.x before 8.8.000005 allows remote authenticated…

published July 2, 2015

CVSS
—
EPSS
2%
Percentile
80.4
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the basic dashboard in Thycotic Secret Server 8.6.x, 8.7.x, and 8.8.x before 8.8.000005 allows remote authenticated users to inject arbitrary web script or HTML via a password entry, which is not properly handled when toggling the password mask.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01980 · 80.4th percentile
Published
2015-07-02T14:42Z
EPSS history
Timeline
  • 02 JUL 14:42Z
    Cross-site scripting (XSS) vulnerability in the basic dashboard in Thycotic Secret Server 8.6.x, 8.7.x, and 8.8.x before 8.8.000005 allows remote authenticated…
    cvelistv5