CVE-2018-9155

Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of…

published April 12, 2018

CVSS
—
EPSS
1%
Percentile
65.8
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of a component, as demonstrated by the Admin->Logs section (with a logs?logs.type= URI) and the Manage->Attributes section (via the "Name (display)" field to the attributes/create URI).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01115 · 65.8th percentile
Published
2018-04-12T15:00Z
EPSS history
Timeline
  • 12 APR 15:00Z
    Cross-site scripting (XSS) vulnerability in Open-AudIT Professional 2.1.1 allows remote attackers to inject arbitrary web script or HTML via a crafted name of…
    cvelistv5