CVE-2016-8581

A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal…

published October 28, 2016

CVSS
—
EPSS
17%
Percentile
97.1
In the wild
Unconfirmed
What it is

A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal session IDs of logged in users when the current sessions are viewed by an administrator.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.17058 · 97.1th percentile
Published
2016-10-28T15:00Z
EPSS history
Timeline
  • 28 OCT 15:00Z
    A persistent XSS vulnerability exists in the User-Agent header of the login process of AlienVault OSSIM and USM before 5.3.2 that allows an attacker to steal…
    cvelistv5