mirror of
https://github.com/fkie-cad/nvd-json-data-feeds.git
synced 2025-05-30 02:00:53 +00:00
255 lines
9.1 KiB
JSON
255 lines
9.1 KiB
JSON
|
{
|
||
|
|
"id": "CVE-2008-4320",
|
||
|
|
"sourceIdentifier": "cve@mitre.org",
|
||
|
|
"published": "2008-09-29T19:25:35.807",
|
||
|
|
"lastModified": "2017-08-08T01:32:33.310",
|
||
|
|
"vulnStatus": "Modified",
|
||
|
|
"descriptions": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "Multiple cross-site scripting (XSS) vulnerabilities in OpenNMS before 1.5.94 allow remote attackers to inject arbitrary web script or HTML via (1) the j_username parameter to j_acegi_security_check, (2) the username parameter to notification/list.jsp, and (3) the filter parameter to event/list."
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"lang": "es",
|
||
|
|
"value": "M\u00faltiples vulnerabilidades de ejecuci\u00f3n de secuencias de comandos en sitios cruzados (XSS) en OpenNMS anteriores a 1.5.94, permite a atacantes remotos inyectar secuencias de comandos web o HTML de su elecci\u00f3n a trav\u00e9s de los par\u00e1metros (1) \"j_username\" a j_acegi_security_check, (2)el par\u00e1metro \"username\" a notification/list.jsp, y (3) el par\u00e1metro \"filter\" a event/list."
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"metrics": {
|
||
|
|
"cvssMetricV2": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"cvssData": {
|
||
|
|
"version": "2.0",
|
||
|
|
"vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
|
||
|
|
"accessVector": "NETWORK",
|
||
|
|
"accessComplexity": "MEDIUM",
|
||
|
|
"authentication": "NONE",
|
||
|
|
"confidentialityImpact": "NONE",
|
||
|
|
"integrityImpact": "PARTIAL",
|
||
|
|
"availabilityImpact": "NONE",
|
||
|
|
"baseScore": 4.3
|
||
|
|
},
|
||
|
|
"baseSeverity": "MEDIUM",
|
||
|
|
"exploitabilityScore": 8.6,
|
||
|
|
"impactScore": 2.9,
|
||
|
|
"acInsufInfo": false,
|
||
|
|
"obtainAllPrivilege": false,
|
||
|
|
"obtainUserPrivilege": false,
|
||
|
|
"obtainOtherPrivilege": false,
|
||
|
|
"userInteractionRequired": true
|
||
|
|
}
|
||
|
|
]
|
||
|
|
},
|
||
|
|
"weaknesses": [
|
||
|
|
{
|
||
|
|
"source": "nvd@nist.gov",
|
||
|
|
"type": "Primary",
|
||
|
|
"description": [
|
||
|
|
{
|
||
|
|
"lang": "en",
|
||
|
|
"value": "CWE-79"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"configurations": [
|
||
|
|
{
|
||
|
|
"nodes": [
|
||
|
|
{
|
||
|
|
"operator": "OR",
|
||
|
|
"negate": false,
|
||
|
|
"cpeMatch": [
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:*:*:*:*:*:*:*:*",
|
||
|
|
"versionEndIncluding": "1.0.0",
|
||
|
|
"matchCriteriaId": "D6756CA1-8204-49E1-A34E-618B0D6AB18E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:*:*:*:*:*:*:*:*",
|
||
|
|
"versionEndIncluding": "1.1.0",
|
||
|
|
"matchCriteriaId": "C50071BC-C35D-468C-AEC4-68207AC927AE"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:*:*:*:*:*:*:*:*",
|
||
|
|
"versionEndIncluding": "1.2.0",
|
||
|
|
"matchCriteriaId": "F4C7019B-E89F-4B4E-92D6-FEF5118CD286"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:*:*:*:*:*:*:*:*",
|
||
|
|
"versionEndIncluding": "1.3.0",
|
||
|
|
"matchCriteriaId": "B9929893-2278-482C-97BB-6E4B6CE03E38"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:*:*:*:*:*:*:*:*",
|
||
|
|
"versionEndIncluding": "1.5.90",
|
||
|
|
"matchCriteriaId": "65663400-C91A-4DDE-B7B7-4C77F2A3AE2C"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.1.1:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "E3D55CA3-1EAC-4042-9910-9B03EE9EFE8F"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.1.2:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "778C09CD-4A28-4509-A2B1-FFA363BAFA43"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.1.3:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "88A5E335-D4E3-4CED-8E1D-E6F6180FEDC6"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.1.4:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "EE86D63E-9DD9-48A9-94F8-7A4DAC7C213D"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.1.5:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "C843F51A-9935-4126-BACA-2A6D056552BA"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.2.1:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "8B07DB5C-1D6F-4E0B-95D0-438714559B26"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.2.2:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "5AB58BD6-7B40-4AAD-AFF0-E6C545D84F1A"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.2.3:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "73B904FB-45A7-44DF-8B0C-D21CDD988907"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.2.4:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "EFEB4C76-58B0-4E6E-9631-61F5538DC01C"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.3.1:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "DBFA2AAA-B6EE-4DA4-9B26-E010B66BB7CE"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.3.2:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "63750949-CB53-4765-ACC2-B0C07D8AF304"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.3.3:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "10FC31B4-782F-47F4-96B3-999FF540A27E"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.3.4:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "F2AA5CF2-931B-4C67-B0AD-620E46986C05"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.3.5:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "8A80CAD2-89EC-4301-8122-36D61780E7D8"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.3.6:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "6B9EEE4F-4D5B-4278-A8A6-8BCE74868448"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.3.7:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "186B870F-B510-4C29-9938-15C65759CBA5"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.3.8:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "1E90D068-7C47-47D5-B7D9-5CADC8EDF981"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.3.9:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "90DD9C66-275C-4B8D-86EE-D3AFD5692C84"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.3.10:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "FFE194CE-BCB3-4AEC-A416-6C75815BC5B1"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.3.11:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "D1C26D1E-348A-4F52-8253-C5089FBD1DB7"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.5.91:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "3399DFDD-C77C-445B-A5B4-890F8991D513"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.5.92:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "31785E64-3255-49D6-9441-5704D572C14C"
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"vulnerable": true,
|
||
|
|
"criteria": "cpe:2.3:a:opennms.org:opennms:1.5.93:*:*:*:*:*:*:*",
|
||
|
|
"matchCriteriaId": "95126302-E8ED-400E-AAAD-FA97A98FB21A"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|
||
|
|
],
|
||
|
|
"references": [
|
||
|
|
{
|
||
|
|
"url": "http://bugzilla.opennms.org/show_bug.cgi?id=2631",
|
||
|
|
"source": "cve@mitre.org",
|
||
|
|
"tags": [
|
||
|
|
"Exploit"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://bugzilla.opennms.org/show_bug.cgi?id=2633",
|
||
|
|
"source": "cve@mitre.org",
|
||
|
|
"tags": [
|
||
|
|
"Exploit"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://bugzilla.opennms.org/show_bug.cgi?id=2634",
|
||
|
|
"source": "cve@mitre.org",
|
||
|
|
"tags": [
|
||
|
|
"Exploit"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.opennms.org/documentation/ReleaseNotesUnStable.html#d788e257",
|
||
|
|
"source": "cve@mitre.org",
|
||
|
|
"tags": [
|
||
|
|
"Patch"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "http://www.securityfocus.com/bid/31410",
|
||
|
|
"source": "cve@mitre.org",
|
||
|
|
"tags": [
|
||
|
|
"Exploit",
|
||
|
|
"Patch"
|
||
|
|
]
|
||
|
|
},
|
||
|
|
{
|
||
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/45417",
|
||
|
|
"source": "cve@mitre.org"
|
||
|
|
}
|
||
|
|
]
|
||
|
|
}
|