{
  "id": "CVE-2004-0787",
  "sourceIdentifier": "cve@mitre.org",
  "published": "2004-10-20T04:00:00.000",
  "lastModified": "2024-11-20T23:49:24.393",
  "vulnStatus": "Modified",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site scripting (XSS) vulnerability in the web frontend in OpenCA 0.9.1-8 and earlier, and 0.9.2 RC6 and earlier, allows remote attackers to inject arbitrary web script or HTML via the form input fields."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en el interfaz web de OpenCA 0.9.1-8 y anteriores, y 0.9.2 y anteriores permite a atacantes remotos inyectar script web o HTML mediante los campos de entrada de formulario."
    }
  ],
  "metrics": {
    "cvssMetricV2": [
      {
        "source": "nvd@nist.gov",
        "type": "Primary",
        "cvssData": {
          "version": "2.0",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N",
          "baseScore": 4.3,
          "accessVector": "NETWORK",
          "accessComplexity": "MEDIUM",
          "authentication": "NONE",
          "confidentialityImpact": "NONE",
          "integrityImpact": "PARTIAL",
          "availabilityImpact": "NONE"
        },
        "baseSeverity": "MEDIUM",
        "exploitabilityScore": 8.6,
        "impactScore": 2.9,
        "acInsufInfo": false,
        "obtainAllPrivilege": false,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "weaknesses": [
    {
      "source": "nvd@nist.gov",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "operator": "OR",
          "negate": false,
          "cpeMatch": [
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C2091E6F-DCEF-4A0B-B9D5-8C68462FF198"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "583D6CE9-76CA-4469-A608-60FB5C20A099"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.8.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BC6D293-6140-435D-9AA9-1579CBD01FEF"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "C28F5B50-380E-4569-B939-A18B28646E12"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.0.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "CB46AC2D-15B6-4C6E-B073-4DE2FEB4D42E"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "AE3B0051-6082-4B40-B3F2-268866E1784A"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A01AEDA-B58B-4823-883A-CA43281EDAD3"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.1.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "63E8A9C3-DCD8-4B7A-97C6-85CFD808E9FA"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.1.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "9919778A-F611-483F-AA1D-81154289EE14"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "CFF9CC49-10A9-4EC2-A4A0-74AE178A3EBB"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.1.5:*:*:*:*:*:*:*",
              "matchCriteriaId": "923B7984-C4FE-4352-A769-64C20F78B865"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.1.6:*:*:*:*:*:*:*",
              "matchCriteriaId": "EC9AD902-1E0D-4E63-BDA4-1AC0EF7D16B2"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "8EBFF2C6-5EB5-4E8D-A334-0ED0ABA6766B"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.1.8:*:*:*:*:*:*:*",
              "matchCriteriaId": "DD0AE47F-2235-41B7-8164-66079B5E1BF9"
            },
            {
              "vulnerable": true,
              "criteria": "cpe:2.3:a:openca:openca:0.9.2_rc6:*:*:*:*:*:*:*",
              "matchCriteriaId": "4B0F9412-163E-48E8-9E1B-3AE1E8C35D2B"
            }
          ]
        }
      ]
    }
  ],
  "references": [
    {
      "url": "http://marc.info/?l=bugtraq&m=109448767123954&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.openca.org/news/CAN-2004-0787.txt",
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/bid/11113",
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17274",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=109448767123954&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.openca.org/news/CAN-2004-0787.txt",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "http://www.securityfocus.com/bid/11113",
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ]
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17274",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ]
}