138 lines
4.4 KiB
JSON
Raw Normal View History

2023-04-24 12:24:31 +02:00
{
"id": "CVE-2004-1499",
"sourceIdentifier": "cve@mitre.org",
"published": "2004-12-31T05:00:00.000",
"lastModified": "2017-07-11T01:31:05.107",
"vulnStatus": "Modified",
"descriptions": [
{
"lang": "en",
"value": "Cross-site scripting (XSS) vulnerability in the compose message form in HELM 3.1.19 and earlier allows remote attackers to execute arbitrary web script or HTML via the Subject field."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "NONE",
"integrityImpact": "PARTIAL",
"availabilityImpact": "NONE",
"baseScore": 4.3
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.6,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "NVD-CWE-Other"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:webhost_automation:helm_control_panel:3.1.10:*:*:*:*:*:*:*",
"matchCriteriaId": "A1AAC076-4BB2-41BE-B654-E98C65E7F7FD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:webhost_automation:helm_control_panel:3.1.11:*:*:*:*:*:*:*",
"matchCriteriaId": "7AE2D214-3338-4DD7-BE02-97DE6A98184D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:webhost_automation:helm_control_panel:3.1.12:*:*:*:*:*:*:*",
"matchCriteriaId": "E8BBF970-7974-4117-86C1-2202E0776342"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:webhost_automation:helm_control_panel:3.1.13:*:*:*:*:*:*:*",
"matchCriteriaId": "B3B57477-3D9D-4EFF-BA2B-D799F62860EC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:webhost_automation:helm_control_panel:3.1.14:*:*:*:*:*:*:*",
"matchCriteriaId": "0BA40BE4-F268-4F5B-BAC7-6D0A09910D8F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:webhost_automation:helm_control_panel:3.1.15:*:*:*:*:*:*:*",
"matchCriteriaId": "0A19AA0F-AEB5-43D8-9707-390B46FDC3F7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:webhost_automation:helm_control_panel:3.1.16:*:*:*:*:*:*:*",
"matchCriteriaId": "40952A2C-0F6D-4567-8A96-846A61F06764"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:webhost_automation:helm_control_panel:3.1.17:*:*:*:*:*:*:*",
"matchCriteriaId": "AB1AEF02-06CF-4664-8775-2BCC49E64081"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:webhost_automation:helm_control_panel:3.1.18:*:*:*:*:*:*:*",
"matchCriteriaId": "37C03BB7-A6CE-42D8-868F-200B379F5017"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:webhost_automation:helm_control_panel:3.1.19:*:*:*:*:*:*:*",
"matchCriteriaId": "9991CD95-615D-4B7F-A703-FDADEBE8B201"
}
]
}
]
}
],
"references": [
{
"url": "http://marc.info/?l=bugtraq&m=109943858026542&w=2",
"source": "cve@mitre.org"
},
{
"url": "http://www.hat-squad.com/en/000077.html",
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.securityfocus.com/bid/11586",
"source": "cve@mitre.org",
"tags": [
"Exploit"
]
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17943",
"source": "cve@mitre.org"
}
]
}