CVE-2018-11552

There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field

published June 1, 2018

CVSS
—
EPSS
28%
Percentile
98.1
In the wild
Unconfirmed
What it is

There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field. The vulnerability exists due to insufficient filtration of user-supplied data. A remote attacker can execute arbitrary HTML and script code in a browser in the context of the vulnerable application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.28236 · 98.1th percentile
Published
2018-06-01T17:00Z
EPSS history
Timeline
  • 22 SEP 03:15Z
    EPSS moved 29% → 14%
    epss
  • 06 SEP 03:11Z
    EPSS moved 29% → 14%
    epss
  • 30 AUG 16:00Z
    EPSS moved 14% → 29%
    epss
  • 29 AUG 04:31Z
    EPSS moved 29% → 14%
    epss
  • 01 JUN 17:00Z
    There is a reflected XSS vulnerability in AXON PBX 2.02 via the "AXON->Auto-Dialer->Agents->Name" field
    cvelistv5