VulnerabilityModified
CVE-1999-1167
Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation.
MEDIUM 6.4EPSS 2.28%
Does this matter?
Lower severity and a low EPSS score (2.28%). Track it; it rarely justifies an emergency change on its own.
Description
Cross-site scripting vulnerability in Third Voice Web annotation utility allows remote users to read sensitive data and generate fake web pages for other Third Voice users by injecting malicious Javascript into an annotation.
- CVSS 2.0
- 6.4 MEDIUMAV:N/AC:L/Au:N/C:P/I:P/A:N
- EPSS
- 2.28% probability · 82th percentile
- CISA KEV
- Not listed
- Affected
- third voice/third voice web
- Source
- cve@mitre.org
References
- http://www.iss.net/security_center/static/7252.php
- http://www.wired.com/news/technology/0%2C1282%2C20636%2C00.html
- http://www.wired.com/news/technology/0%2C1282%2C20677%2C00.html
- http://www.iss.net/security_center/static/7252.php
- http://www.wired.com/news/technology/0%2C1282%2C20636%2C00.html
- http://www.wired.com/news/technology/0%2C1282%2C20677%2C00.html
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.