VulnerabilityModified

CVE-2005-4502

Cross-site scripting (XSS) vulnerability in httprint v202, and possibly other versions before v301, allows remote attackers to inject arbitrary web script or HTML via the Server field in an HTTP response, which is not sanitized before being displayed to…

MEDIUM 4.3EPSS 2.55%

Does this matter?

Lower severity and a low EPSS score (2.55%). Track it; it rarely justifies an emergency change on its own.

Description

CVSS 2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 2.55% probability · 84th percentile
CISA KEV: Not listed
Affected: net-square/httprint
Source: cve@mitre.org

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html
http://net-square.com/httprint/#history
http://secunia.com/advisories/18208
http://securitytracker.com/id?1015403
http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_httprint_Multiple_Vulnerabilities.pdfExploit, Vendor Advisory
http://www.securityfocus.com/archive/1/420101/100/0/threaded
http://www.securityfocus.com/bid/16031Exploit, Patch
http://www.vupen.com/english/advisories/2005/3070
https://exchange.xforce.ibmcloud.com/vulnerabilities/23885
http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/040532.html
http://net-square.com/httprint/#history
http://secunia.com/advisories/18208
http://securitytracker.com/id?1015403
http://www.cybsec.com/vuln/CYBSEC_Security_Advisory_httprint_Multiple_Vulnerabilities.pdfExploit, Vendor Advisory
http://www.securityfocus.com/archive/1/420101/100/0/threaded
http://www.securityfocus.com/bid/16031Exploit, Patch
http://www.vupen.com/english/advisories/2005/3070
https://exchange.xforce.ibmcloud.com/vulnerabilities/23885

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.