CVE-2018-1000855

easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is mounted that can result in Reflected XSS…

published December 20, 2018

CVSS
—
EPSS
1%
Percentile
59.2
In the wild
Unconfirmed
What it is

easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is mounted that can result in Reflected XSS that affects Firefox. Can be used to steal cookies, depending on the cookie settings.. This attack appear to be exploitable via The victim must click on a crafted URL that contains the XSS payload. This vulnerability appears to have been fixed in 1.4.1 and later.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00896 · 59.2th percentile
Published
2018-12-20T16:00Z
EPSS history
Timeline
  • 20 DEC 16:00Z
    easymon version 1.4 and earlier contains a Cross Site Scripting (XSS) vulnerability in Endpoint where monitoring is mounted that can result in Reflected XSS…
    cvelistv5