CVE-2017-9394CWE-79

A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the…

published November 14, 2017

CVSS
—
EPSS
1%
Percentile
49.8
In the wild
Unconfirmed
What it is

A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the context of another user.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00642 · 49.8th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2017-11-14T21:00Z
EPSS history
Timeline
  • 14 NOV 21:00Z
    A stored cross-site scripting vulnerability in CA Identity Governance 12.6 allows remote authenticated attackers to display HTML or execute script in the…
    cvelistv5