VulnerabilityModified
CVE-2006-5122
Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) "any field create name field" except "create new group name" or (2) any description…
MEDIUM 4.9EPSS 1.15%
Does this matter?
Lower severity and a low EPSS score (1.15%). Track it; it rarely justifies an emergency change on its own.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Mercury SiteScope 8.2 (8.1.2.0) allow remote authenticated users to inject arbitrary web script or HTML via (1) "any field create name field" except "create new group name" or (2) any description field.
- CVSS 2.0
- 4.9 MEDIUMAV:N/AC:M/Au:S/C:P/I:P/A:N
- EPSS
- 1.15% probability · 65th percentile
- CISA KEV
- Not listed
- Affected
- hp/mercury sitescope
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/22215
- http://securityreason.com/securityalert/1670
- http://www.securityfocus.com/archive/1/447397/100/0/threaded
- http://www.securityfocus.com/bid/20275
- http://www.vupen.com/english/advisories/2006/3888
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29295
- http://secunia.com/advisories/22215
- http://securityreason.com/securityalert/1670
- http://www.securityfocus.com/archive/1/447397/100/0/threaded
- http://www.securityfocus.com/bid/20275
- http://www.vupen.com/english/advisories/2006/3888
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29295
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.